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CONTENT DISTRIBUTION SYSTEM, CONTENT DISTRIBUTION METHOD, 
INFORMATION PROCESSING APPARATUS, AND PROGRAM PROVIDING MEDIUM 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention generally relates to content distribution systems, content 
distribution methods, information processing apparatuses, and program providing media. More 
particularly, the present invention relates to a content distribution system, a content distribution 
method, an information processing apparatus, and a program providing medium, which can be 
advantageously employed, in a communication network such as the Internet or in data 
communication performed via a medium, to identify a person at a receiving end and to 
authenticate a person to whom various contents such as music data and image data are 
distributed. 

2. Description of the Related Art 

A data processing apparatus such as a personal computer (PC) is widely used in a 
company or by a person. In some cases, secret data is stored in such an apparatus. To prevent 
such secret data from being accessed by an unauthorized user, techniques of preventing 
information stored in a PC from being leaked have been developed. One known technique for 
this purpose is to identify a user on the basis of a password input by the user or on the basis of 
biometric information of the user. 

Now, it is popular to distribute various kinds of software data such as a game program, 
audio data, image data, and a document generating program (hereinafter, such software data will 
be referred to as a content) via a network such as the Internet or a storage medium such as a 
DVD or a CD which can be distributed. In such a situation, it is highly desirable to quickly 
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identify a user in a highly reUable fashion in various processes such as distribution of a content 
or reception of a fee for usage of a content. Furthermore, in the user identification process, it is 
very important to prevent personal information from being leaked. 

One widely-used user identification method is to compare input data with preassigned 
data such as a user ID or a password. However, in this method, there is always a possibility that 
a registered user ID or password is leaked. Once a user ID or password has been leaked, the 
same user ID or password becomes unusable. One knovm method to avoid the above problem is 
to identify a user using biometric information. 

An example of a conventional process of identifying a person using biometric 
information is described below. A representative example of biometric information for the 
above purpose is a fingerprint. A personal authentication apparatus which reads a fingerprint 
and verifies it is described below with reference to Fig. 1. In Fig. 1, a user of a PC 20 registers 
his/her fingerprint information in a personal authentication apparatus 10 including a reading 
apparatus, and data indicating the fingerprint is stored in a secure memory 14. The fingerprint 
information stored therein is called a template. When the user uses data on the personal 
computer 20, his/her fingerprint is read and compared with the template by the personal 
authentication apparatus 10 serving as a fingerprint reading apparatus. 

More particularly, reading of fingerprint information of a user is performed by a personal 
information acquisition unit 1 1 formed of a CCD camera or the like. After being read, the 
fingerprint information is subjected to a feature extraction process performed by an information 
converter 12, and resultant data is compared, by a comparator 13, with the template stored in the 
secure memory 14. 
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The comparator 13 determines whether or not the data is identical to the template on the 
basis of a threshold value preset in the comparator. If the data and the template match with each 
other to a degree higher than the threshold value, the comparator 13 outputs an OK signal, while 
a NG signal is output when the matching degree is lower than the threshold value. The 
fingerprint information is stored in the form of fingerprint image data, and the data indicating the 
feature extracted by the information converter 12 is compared with the image data to check the 
matching degree relative to the threshold value. 

In the case where the comparator 13 determines that the input information and the 
registered information match each other, an authentication success message is transmitted to the 
personal computer 20 via a communication unit 16, and the user is permitted to access the 
personal computer 20. If it is determined that the input data does not match with the registered 
information, an authentication failure message is transmitted, and accessing to the personal 
computer 20 is refixsed. The personal authentication apparatus 10 may include fingerprint 
information templates of a plurality of users (user ID = IDl to IDn) stored in the secure memory 
14 as shown in Fig. 1, and a user may be permitted to access the PC if the personal 
authentication apparatus 10 determines that a fingerprint of the user matches with some stored 
template. This makes it possible for a single personal authentication apparatus to deal with a 
plurality of users. 

However, the above-described personal authentication apparatus has the following 
problems arising from the construction in which templates are stored in a memory of the 
fingerprint reading/comparing apparatus. 

(a) To use the comparison result, it is required that a template be included in the 
fingerprint reading/comparing apparatus. 
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(b) In the case ^yhe^e a fingerprint is compared at a plurality of different locations, it 
is required to register, beforehand, the fingerprint in a plurality of fingerprint read/comparison 
apparatuses. 

(c) Because templates are stored in the fingerprint reading/comparing apparatus, there 
is a risk that data representing templates may be tampered with or may be read by an . 
unauthorized person. 

(d) When the comparison result is transmitted to a PC or the like, the comparison 
result can be easily attacked. 

As described above, the conventional personal authentication system is coupled in an 
inseparable fashion to a particular data processing apparatus such as a personal computer which 
deals with secret information, in which the personal authentication system is assumed to 
authenticate only users who deal with that personal computer, and thus the personal 
authentication system cannot be used to authenticate a user who uses another device in which no 
template is stored. Furthermore, because templates are stored in the fingerprint 
reading/comparing apparatus itself, there is a problem in terms of security and reliability of 
templates. 

Furthermore, in data transmission in which encrypted data are transmitted via a network 
or in data distribution via a medium, data are generally encrypted using a public key, and a 
public key certificate is widely used to guarantee the reliability of the public key. However, 
although a public key certificate certifies a public key itself, the public key certificate cannot 
guarantee the relationship between the public key and a person who owns that public key. That 
is. 
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(e) No technique is known to guarantee the relationship between a public key used in 
transmission of encrypted data or the like and an owner of that public key, and an adequate 
means for identifying the owner of the public key is not known. 

As described above, the conventional personal authentication system has various 
problems to be solved. In particular, in a recent social situation in which advanced 
communication systems via networks such as the Internet have become very popular, large 
amounts of secret information and personal information are frequently dealt with using various 
communication devices and data processing devices at various locations and at various times. 
Furthermore, in pay contents distribution systems/services in which contents are distributed to 
specific users such as registered members, it is required to identify users when contents are 
distributed or services are provided. Thus, it is highly desired to realize a personal authentication 
system which is usable without having limitations in terms of locations, times, and devices used. 

In view of the above, it is an object of the present invention to provide a personal 
authentication system and a personal authentication method, which allow personal authentication 
to be performed in various situations and environments in a highly reliable fashion, and which 
allow template information to be stored and used in a highly secure manner, and furthermore, 
which can be used in conjunction with a public key certificate, thereby allowing personal 
authentication to be used in various fields. 
SUMMARY OF THE INVENTION 

In view of the above, it is an object of the present invention to provide a personal 
authentication system and a personal authentication method, which allow personal authentication 
to be performed in various situations and environments in a highly reliable fashion, and which 
allow a template to be stored and used in a highly secure manner, and furthermore, which can be 
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used in conjunction with a public key certificate, thereby allowing personal authentication to be 
used in various fields. 

More particularly, in a content distribution, it is an object of the present invention to 
provide a content distribution system, a content distribution method, an information processing 
apparatus, and a program providing a medium for performing personal authentication of a 
content receiving user in a secondary content distribution among user devices after a primary 
content distribution, and for providing a system for the secondary content distribution upon 
authenticating the user, whereby usage of a content transmitted among the user devices is 
controllable, when the personal authentication is affirmative in reference to a personal 
identification certificate issued by a personal identification authority serving as a reliable third 
party agent. 

According to a first aspect of the present invention, there is provided a content 
distribution system for performing content transaction management. The system comprises the 
following: (a) a plurality of user devices among which the content transaction management 
allows a content to be secondarily distributed, (b) a secure container containing the content 
encrypted by a content key, and container information including conditions set for a transaction 
of the content, (c) a first section for distributing the content by transmitting the secure container, 
and (d) a second section for performing personal authentication, when the secure container is 
transmitted among the plurality of user devices, based on a personal identification certificate 
(hereinafter, simply referred to as an IDC) which is identified in reference to an IDC identifier 
list. The container information includes the IDC identifier list as a list of the IDCs, each of 
which is generated by a personal identification authority (hereinafter, simply referred to as an 
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IDA) as a third party agent and stores a template serving as personal identification data of a 
target user for the content transaction. 

In an embodiment of the content distribution system according to the first aspect of the 
present invention, a secure container receiving device among the plurality of user devices may 
generate usage control status information on a content based on the container information 
included in the secure container, and store the usage control status information in a memory of 
the receiving device, while the usage control status information includes the IDC identifier list. 

In another embodiment of the content distribution system according to the first aspect of 
the present invention, a secure container receiving device among the plurality of user devices 
may generate usage control status information on a content based on the container information 
included in the secure container, and store the usage control status information in a memory of 
the receiving device, v^hile the usage control status information may include conditions set for 
processing secondary distribution of the content, i.e., follov^ng content distribution after a 
primary content distribution. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices is preferably configured to compare sampling information input by a user with the 
template stored in the IDC identified in reference to the IDC identifier list, to process personal 
authentication of a user of a receiving device among the plurality of user devices, to which the 
secure container is to be distributed, and to perform a process so that a content is available at the 
receiving device, when the comparison result is affirmative. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, a secure container distributing device among the plurality of user 
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devices is preferably configured to compare sampling information input by a user with the 
template stored in the IDC identified in reference to the IDC identifier list, to process personal 
authentication of a user of a receiving device among the plurality of user devices, to which the 
secure container is to be distributed, and to perform a process of distribution of the content key 
for encrypting the content stored in the secure container, when the comparison result is 
affirmative. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices is preferably configured to compare sampling information input by a user with the 
template stored in the IDC identified in reference to the IDC identifier list, to process personal 
authentication of a user of the receiving device, to which the secure container is to be distributed, 
and to notify a distributing device among the user devices, as a distributor of the secure 
container, of the process result of the personal authentication. The distributing device is 
preferably configured to perform a process so that a content is available at the receiving device, 
when the comparison result is affirmative. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices is preferably configured to compare sampling information input by a user with the 
template stored in the IDC identified in reference to the IDC identifier list, to process personal 
authentication of a user of the receiving device, to which the secure container is to be distributed, 
and to notify a distributing device among the user devices, as a distributor of the secure 
container, of the process result of the personal authentication. The distributing device is 
preferably configured to perform processes so that the secure container and the content key 
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stored in the secure container are distributed to the receiving device of the secure container and 
available at the receiving device, when the comparison result is affirmative. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, the IDC used for personal authentication, which is performed 
when the secure container is transmitted among the plurality of user devices, is preferably 
configured to be stored in advance in any of the plurality of user devices which is to perform the 
personal authentication. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, any of the user devices, which is to perform personal 
authentication when the secure container is transmitted among the plurality of user devices, is 
preferably configured to obtain the IDC used for the personal authentication fi-om the IDA as an 
issuer of the IDCs. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, the container information may fiirther include usage permission 
data of the content such as reproduction and duplication of the content. A receiving device 
among the plurality of user devices is preferably configured to perform restricting usage of the 
content based on the usage permission data of the content or usage control status information 
generated according to the usage permission data. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, the secure container may be further configured to include a 
digital signature of a producer of the secure container. 
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In still another embodiment of the content distribution system according to the first 
aspect of the present invention, the IDC identifier list is preferably configured to include data for 
associating a user identifier with his/her IDC identifier. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, each of distributing and receiving devices among the plurality of 
user devices, which are to perform a content transaction, may further comprise an encryption 
unit. Each of the devices is preferably configured to perform mutual authentication upon 
performing data transmission between the distributing and receiving devices. Additionally, the 
data transmitting and receiving sides are preferably configured, respectively, to generate a digital 
signature of the transmitting data and to verify the digital signature. 

In still another embodiment of the content distribution system according to the first 
aspect of the present invention, the template may comprise at least any one of the following (a) 
to (d): (a) personal biotic information including fingerprint information, retina pattern 
information, iris pattern information, voice print information, and handwriting information, (b) 
personal non-biotic information including a seal, a passport, a driver's license, and a card, (c) 
combined information between the biotic information and the non-biotic information, and (d) 
another combined information of a password and any information of (a) and (b). 

According to the second aspect of the present invention, there is provided a content 
distribution method for performing content transaction management for allowing a content to be 
secondarily distributed among a plurality of user devices, which comprises the steps of: 

distributing the content by transmitting a secure container containing the content 
encrypted by a content key, and container information including conditions set for a transaction 
of the content; and 
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performing personal authentication, when the secure container is transmitted among the 
plurality of user devices, based on an IDC which is identified in reference to an IDC identifier 
list. 

The container information contains the IDC identifier list as a list of the IDCs storing a 
template, and each IDC serves as identification data of a target user for the content transaction. 

In an embodiment of the content distribution method according to the second aspect of 
the present invention, the IDC is preferably generated by an IDA serving as a third party agent. 

In another embodiment of the content distribution method according to the second aspect 
of the present invention, a secure container receiving device among the plurality of user devices 
may comprise the steps of generating usage control status information on a content based on the 
container information included in the secure container, and storing the usage control status 
information in a memory of the receiving device. Besides the usage control status information 
may include the IDC identifier list. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container receiving device among the plurality of user 
devices may comprise the steps of generating the usage control status information on a content 
based on the container information included in the secure container, and storing the usage control 
status information in a memory of the receiving device. Besides the usage control status 
information may include conditions set for processing secondary distribution of the content, i.e., 
following content distribution after a primary content distribution. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices may comprise the steps of: 
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comparing sampling information input by a user with the template stored in the IDC 
identified in reference to the IDC identifier list; 

performing personal authentication of a user of a receiving device among the plurality of 
user devices, to which the secure container is to be distributed; and 

performing a process so that a content is available at the receiving device, when the 
comparison result is affirmative. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices may comprise the steps of: 

comparing sampling information input by a user with the template stored in the IDC 
identified in reference to the IDC identifier list; 

performing personal authentication of a user of a receiving device among the plurality of 
user devices, to which the secure container is to be distributed; and 

performing a process so that a content is available at the receiving device, when the 
comparison result is affirmative. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container distributing device among the plurality of user 
devices may comprise the steps of: 

comparing sampling information input by a user with the template stored in the IDC 
identified in reference to the IDC identifier list; 

performing personal authentication of a user of a receiving device among sail plurality of 
user devices, to which the secure container is to be distributed; and 
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performing distribution of the content key for encrypting the content stored in the secure 
container, when the comparison result is affirmative. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container receiving device among the user devices may 
comprise the steps of: 

comparing sampling information input by a user v^ith the template stored in the IDC 
identified in reference to the IDC identifier list; 

performing personal authentication of a user of the receiving device, to which the secure 
container is to be distributed; and 

notifying a distributing device among the plurality of user devices, as a distributor of the 
secure container, of the result of personal authentication. 

Besides the distributing device may comprise the step of performing a process so that a 
content is available at the receiving device, when the comparison result is affirmative. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, a secure container receiving device among the plurality of user 
devices may comprise the steps of: 

comparing sampling information input by a user with the template stored in the IDC 
identified in reference to the IDC identifier list; 

performing personal authentication of a user of the receiving device, to which the secure 
container is to be distributed; and 

notifying a distributing device among the user devices, as a distributor of the secure 
container, of the result of personal authentication, 
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besides the distributing device comprises the step of performing distribution of the secure 
container and the content key stored in the secure container for encrypting the content to the 
receiving device of the secure container, when the comparison result is affirmative. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, the IDC used for personal authentication is preferably stored in 
advance in any of the plurality of user devices which is to perform the personal authentication 
which is performed when the secure container is transmitted among the plurality of user devices. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, any of the plurality of user devices, which is to perform personal 
authentication when the secure container is transmitted among the plurality of user devices, may 
comprise the step of obtaining the IDC necessary for the personal authentication from the IDA as 
an issuer of the IDCs. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, the container information may further include usage permission 
data of the content such as reproduction and duplication of the content, 

A receiving device among the plurality of user devices may comprise the step of 
performing restricting usage of the content based on the usage permission data of the content or 
the usage control status information generated according to the usage permission data. 

In still another embodiment of the content distribution method according to the second 
aspect of the present invention, each of content transacting user devices among the plurality of 
user devices, may include an encryption unit and may comprise the step of performing mutual 
authentication upon performing data transmission among the content transacting user devices. 



- 15. 



Besides data transmitting and receiving sides may comprise the steps of, respectively, generating 
a digital signature of the transmitting data and verifying the digital signature. 

According to the third aspect of the present invention, there is provided an information 
processing apparatus for reproducing a content. The apparatus comprises: 

a storing section for storing the content in the apparatus when a secure container, 
including the content encrypted by a content key and container information containing conditions 
set for a sales price as v^ell as a sales restriction of the content, is transmitted; and 

a processing section for performing personal authentication based on an IDC identified in 
reference to an IDC identifier list when the content is regenerated. 

A template serves as identification data of a target user for a content transaction, and the 
container information includes the IDC identifier list as a list of the IDCs storing the template. 
Each IDC is generated by an IDA serving as a third party agent. 

In an embodiment of the information processing apparatus according to the third aspect 
of the present invention, the processing section may further comprise: 

a first processing sub-section for performing the personal authentication by comparing 
the template stored in the IDC identified in reference to the IDC identifier list with sampling 
information input by a user. 

In another embodiment of the information processing apparatus according to the third 
aspect of the present invention, the processing section may further comprise: 

a second processing sub-section for performing the personal authentication of a user who 
is to be permitted to access the information processing apparatus, based on a device-dependent 
IDC set to the apparatus; and 
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a third processing sub-section for performing the personal authentication based on the 
IDS storing the container information and identified in reference to the IDC list, when the secure 
container is used, in addition to the second processing section being performed. 

According to the fourth aspect of the present invention, there is provided a program 
providing medium for storing a program. The program comprises the steps of executing a 
content distribution process for performing content transaction management so that a content is 
secondarily distributed among a plurality of user devices, and executing a personal 
authentication based on an IDC identified in reference to a IDC identifier list when a secure 
container is transmitted among the plurality of user devices. 

The secure container contains the content encrypted by a content key, and container 
information including conditions set for a transaction of the content as well as the IDC identifier 
list serving as a list of the IDCs storing a template, while each IDC serves as identification data 
of a target user for the content transaction. 

The program providing medium according to the fourth aspect of the present invention is 
used to provide a computer program in a computer-readable format to a computer system capable 
of executing various program codes. There is no particular limitation in the form of the medium, 
and various types of media can be used. Specific examples include a storage medium such as a 
CD, FD, MO, and DVD and a transmission medium such as a network. 

Such a program providing medium defines a cooperative relationship in structure or 
function between the computer program and the providing medium so that the computer program 
functions on a computer system. In other words, the program providing medium operates in a 
cooperative fashion on a computer system when the computer program is installed on the 
computer system via the program providing medium, thereby achieving functions similar to 



- 17- 



those which can be achieved according to the other aspects of the present invention. Other 
objects, aspects, and advantages of the present invention will become apparent from the 
following description of embodiments with reference to the accompanying drawings. 

As described above, the personal authentication system, the personal authentication 
method, and the information processing apparatus according to the present invention allow 
personal authentication to be performed in an easy fashion in various devices by comparing a 
template serving as personal identification data with sampling information input by a user. For 
example, a service provider (SP) or a user device (UD) can execute personal authentication by 
acquiring a template from a personal identification certificate (IDC) generated by a third-party 
agency serving as a personal identification certificate authority (IDA). The personal 
identification certificate (IDC) is issued by the personal identification certificate authority (IDA), 
in response to a request from a person, on the basis of a template serving as identification data 
which is acquired from the person after verifying the identification of the person, and, when the 
personal identification certificate (IDC) is distributed to a service provider (SP) or a user device 
(UD), the distribution is performed after adding a signature of the IDA thereto, thereby ensuring 
that the validity of the data is guaranteed and high-reliability personal authentication can be 
performed. 

Furthermore, in the content distribution system, the content distribution method, and the 
information processing apparatus according to the present invention, when a content is 
secondarily distributed among the user devices after a primary distribution, the content 
distribution is performed by transmitting a secure container including the content encrypted by a 
content key and container information set for a content transaction of the content. Further the 
container information includes an IDC identifier list as a list of IDCs storing a template serving 
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as identification data of a target user for the content transaction. Still further the user devices, 
which are to conduct the content transaction, store usage control status information including the 
IDC identifier list in devices. With the configuration such that usage permission control of the 
devices is performed after performing personal authentication based on the IDCs identified in 
reference to the list, a personal authentication is readily and reliably performed, thereby serving 
to prevent a fraudulent transaction of the content. 

Furthermore, in the content distribution system, the content distribution method, and the 
information processing apparatus according to the present invention, personal authentication of a 
user who is to be permitted to access the information processing apparatus is performed based on 
a device-dependent IDC set to the apparatus. Whereby, when the secure container is used, 
performing both personal authentication based on the IDC corresponding to each of devices as 
well as on the IDC identified in reference to the IDC list of the container information included in 
the secure container serves to limit users of a device and a content, accordingly allowing only 
authorized users to access the device and the content, consequently serving to prevent fraudulent 
usage of the content. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a diagram illustrating a conventional personal authentication apparatus which 

reads and verifies a fingerprint; 

Fig. 2 is a diagram illustrating encrypted data communication performed, using a public 
key certificate, by a personal authentication system according to the present invention; 

Fig. 3 is a diagram illustrating a data format of a public key certificate; 

Fig. 4 is a diagram illustrating the data format of the public key certificate; 

Fig. 5 is a diagram illustrating an example of a format of a personal identification 
certificate; 
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Figs. 6A to 6C are diagrams illustrating manners of encrypting a template of a personal 
identification certificate; 

Fig. 7 is a table illustrating the types of keys used to encrypt a template of a personal 
identification certificate and also illustrating processing manners; 

Figs. 8A and 8B are diagrams illustrating manners of encrypting a template of a personal 
identification certificate; 

Fig. 9 is a diagram illustrating a processing flow and a data flow in registration of a 
template and generation of an IDC; 

' Fig. 10 is a diagram illustrating a processing flow and a data flow in a process of deleting 
a template; 

Fig. 11 is a diagram illustrating a processing flow and a data flow in a process of 
changing a template; 

Fig. 12 is a diagram illustrating a processing flow and a data flow in a process of adding a 
template; 

Fig. 13 is a diagram illustrating a processing flow and a data flow in a process of 
suspending a template; 

Fig. 14 is a diagram illustrating a processing flow and a data flow in a process of 
canceling suspension of a template; 

Fig. 15 is a diagram illustrating a processing flow and a data flow in a process of 
distributing an IDC; 

Fig. 16 is a diagram illustrating a processing flow and a data flow in a process of 
updating an IDC; 
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Fig. 17 is a diagram illustrating a processing flow and a data flow in a process of deleting 
an IDC; 

Fig. 18 is a diagram illustrating a processing flow and a data flow in a process of 
inquiring about an IDC; 

Fig. 19 is a diagram illustrating examples of configurations of a certificate authority (CA) 
which issues a public key certificate (PKC), a personal identification certificate authority (IDA) 
which issues a personal identification certificate (IDC), and a device which uses a certificate; 

Fig. 20 is a diagram illustrating examples of configurations of a certificate authority (CA) 
which issues a public key certificate (PKC), a personal identification certificate authority (IDA) 
which issues a personal identification certificate (IDC), and a device which uses a certificate; 

Figs. 21 A to 21 C are diagrams illustrating manners of performing verification by a user 
device, a service provider (SP), or a personal identification certificate authority (IDA) in a 
system; 

Fig. 22 is a diagram illustrating a system in which verification is performed by a user 

device; 

Fig. 23 is a diagram illustrating a system in which verification is performed by a service 
provider (SP); 

Fig. 24 is a diagram illustrating a verification process performed by a user device storing 
an IDC and a PKC; 

Fig. 25 is a diagram illustrating a system in which verification is performed by 
transmitting a personal identification certificate (IDC) stored in a personal terminal such as an IC 
card to a shared user device; 
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Fig. 26 is a diagram illustrating a system in which verification is performed by decrypting 
a personal identification certificate (IDC) stored in a personal terminal such as an IC card and 
then transmitting the decrypted IDC to a shared user device; 

Fig. 27 is a diagram illustrating a system in which verification is performed by a personal 
terminal such as an IC card using a personal identification certificate (IDC) stored in the personal 
terminal and only the result of the verification is transmitted to a shared user device; 

Fig. 28 is a diagram illustrating a process performed when template information of a 
personal identification certificate (IDC) is encrypted using a public key of a service provider 
(SP); 

Fig. 29 is a diagram illustrating a system in which verification is performed by 
transmitting a personal identification certificate (IDC) stored in a user device to a service 
provider (SP); 

Fig. 30 is a diagram illustrating a system in which verification is performed by decrypting 
a personal identification certificate (IDC) stored in a user device and then transmitting the 
decrypted IDC to a service provider (SP); 

Fig. 31 is a diagram illustrating a system in which verification is performed by a user 
device using a personal identification certificate (IDC) stored in the user device and only the 
result of the verification is transmitted to a service provider (SP); 

Fig. 32 is a diagram illustrating a configuration of a secure container containing a content 
to be distributed via content transaction; 

Fig. 33 is a diagram illustrating a form of a list of personal identification certificates 

(IDCs); 
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Fig. 34 is a diagram illustrating a specific example of a form of sales restriction (UCP) 
information; 

Fig. 35 is a diagram illustrating an example of a format of a permitted usage data; 
Fig. 36 is a diagram illustrating an example of a data format of price information included 
in a secure container; 

Fig. 37 is a diagram illustrating a manner of distributing a content using a secure 
container; 

Fig. 38 is a diagram illustrating an example of a data format of usage control status 
(UCS) information; 

Fig. 39 is a diagram illustrating a manner of using a personal identification certificate 
(IDC) when a secure container containing a content is distributed from a service provider to a 
user device; 

Fig. 40 is a flow chart of a process in which a secure container is received from a service 
provider and a personal authentication is performed by a user device so that the content can be 
used only by authorized users; 

Fig. 41 is a flow chart of a process in which a personal authentication is performed by a 
service provider and a secure container is distributed only to authorized users; 

Fig. 42 is a diagram illustrating a manner of distributing a content among users using a 
secure container; 

Fig. 43 illustrates another manner in which a content is distributed using a secure 
container among users and a manner in which user authentication is performed; 
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Fig. 44 is a flow chart of a process in which a secure container is received from a user 
device A and personal authentication is performed by a user device B so that only authorized 
users can use the content; 

Fig. 45 is a flow chart of a process in which personal authentication is performed by a 
content distributor before distributing a content and a secure container is distributed only to 
authorized users; 

Fig. 46 is a block diagram mainly illustrating configurations of user devices which 
transmit a secure container to each other; 

Figs. 47A and 47B are diagrams illustrating various manners of linking a personal 
identification certificate (IDC) and a public key certificate (PKC) to each other; 

Figs. 48A and 48B are diagrams illustrating various manners of linking personal 
identification certificates (IDCs) and public key certificates (PKC) to one another; 

Figs. 49A and 49B are diagrams illustrating manners of storing a public key certificate 
(PKC) linked to a personal identification certificate (IDC) into the personal identification 
certificate (IDC); 

Figs. 50A and SOB illustrate manners of storing an identification number of a certificate 
into another certificate; 

Figs. 51 A and 5 IB are diagrams illustrating examples of manners of management using 
link management data; 

Figs. 52A and 52B are diagrams illustrating another examples of manners of management 
using link management data; 

Fig. 53 is a diagram illustrating a configuration of a user device capable of performing 
personal authentication and reproducing a content; 
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Fig. 54 is a diagram illustrating a data flow in a process of downloading a content; 
Fig. 55 is a diagram illustrating the details of the data flow in the process of downloading 
a content; 

Fig. 56 is a diagram illustrating the details of the data flow in the process of downloading 
a content; 

Fig. 57 is a diagram illustrating the details of the data flow in the process of downloading 
a content; 

Fig. 58 is a diagram illustrating a data flow in processes of user registration, erasure of 
user registration, and making a service contract; 

Fig. 59 is a diagram illustrating the details of the data flow in the processes of user 
registration, erasure of user registration, and making a service contract; 

Fig. 60 is a diagram illustrating the details of the data flow in the processes of user 
registration, erasure of user registration, and making a service contract; 

Fig. 61 is a diagram illustrating the details of the data flow in the processes of user 
registration, erasure of user registration, and making a service contract; 

Fig. 62 is a diagram illustrating a flow of data in the process of requesting a personal 
identification certificate (IDC), which is to be stored in a device, to be issued; 

Fig. 63 is a diagram illustrating the details of the flow of data in the process of requesting 
the personal identification certificate (IDC), which is to be stored in the device, to be issued; 

Fig. 64 is a diagram illustrating the details of the flow of data in the process of requesting 
the personal identification certificate (IDC), which is to be stored in the device, to be issued; 

Fig. 65 is a diagram illustrating the details of the flow of data in the process of requesting 
the personal identification certificate (IDC), which is to be stored in the device, to be issued; 
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Fig. 66 is a diagram illustrating a procedure of issuing a one-time PKC; 

Fig. 67 is a flow chart of the procedure of issuing a one-time PKC; 

Fig. 68 is a diagram illustrating a first manner of using a verification certificate; 

Fig. 69 is a flow chart of a process of using a verification certificate; 

Fig. 70 is a diagram illustrating a second manner of using a verification certificate; 

Fig. 71 is a diagram illustrating an example of a format of a verification certificate; 

Fig. 72 is a diagram illustrating a process in which personal authentication is performed 
using a personal identification certificate (IDC) which has already been registered in a personal 
identification certificate authority (IDA), and a content is distributed in accordance with the 
personal authentication; 

Fig. 73 is a flow chart of a process in which a content is distributed after performing 
personal authentication using an IDC and performing mutual authentication using a PKC; 

Fig. 74 is a flow chart of a process in which a content is distributed after performing 
personal authentication using an IDC and performing mutual authentication using a PKC; 

Fig. 75 is a flow chart of a process in which a content is distributed after performing 
personal authentication using an IDC and performing mutual authentication using a PKC; 

Fig. 76 is a diagram illustrating a process in which personal authentication is performed 
using a user IDC and a device PKC and also using an IDC which has already been registered in a 
personal identification certificate authority (IDA), and then a content is distributed to a user 
using the device PKC; 

Fig. 77 is a flow chart illustrating a process in which personal authentication is performed 
using a user IDC and a device PKC and also using an IDC which has already been registered in a 
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personal identification certificate authority (IDA), and then a content is distributed to a user 
using the device PKC; 

Fig. 78 is a flow chart illustrating a process in which personal authentication is performed 
using a user IDC and a device PKC and also using an IDC which has already been registered in a 
personal identification certificate authority (IDA), and then a content is distributed to a user 
using the device PKC; 

Fig. 79 is a diagram illustrating a personal identification certificate (IDC) in which 
validity information (expiration date and the number of times the IDC is allowed to be used) of 
the personal identification certificate (IDC) and also the expiration date of template information 
stored in the IDC are set; 

Figs. 80A and SOB are diagrams illustrating manners of managing the "expiration date or 
the number of times the IDC is allowed to be used" and the "expiration date of template" of the 
template information stored in a personal identification certificate (IDC); 

Fig. 81 is a diagram illustrating a manner of managing the expiration date of the IDC and 
the expiration date of the template; 

Fig. 82 is a diagram illustrating a manner of managing the number of times the IDC is 
allowed to be used and the template expiration date; 

Fig. 83 is a flow chart illustrating a process of controlling the usage of an IDC in 
accordance with the "expiration date or number of times the IDC is allowed to be used" and 
"expiration date of template" described in a personal identification certificate (IDC); 

Fig. 84 is a diagram illustrating a process in which when a personal identification 
certificate (IDC) is used, if it turns out that the "IDC expiration date" has been reached, the 
personal identification certificate (IDC) is updated; 
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Fig. 85 is a diagram illustrating a process in which the expiration date of a personal 
identification certificate (IDC) is checked at scheduled intervals, and if it turns out that the "IDC 
expiration date" has been reached, the IDC is updated; 

Fig. 86 is a diagram illustrating a process in which the expiration date of template 
information which has already been registered in a personal identification certificate authority 
(IDA) is checked by the IDA and updated if the expiration date has been reached, after informing 
a user that the expiration date has been reached; and 

Fig. 87 is a diagram illustrating a process in which template information which has 
already been registered in a personal identification certificate authority (IDA) is updated in 
response to an updating request from an user. 
DESCRIPTION OF THE PREFERRED EMBODIMENT 

The present invention is described in fiirther detail below with reference to preferred 
embodiments in conjunction with the accompanying drawings. 

The present invention is described below in terms of items listed below. 

1 . Concepts of the Present Invention and the Outline of Certificates 

2 . Encryption of Template 

3. Registration and Change of Template and Person Identification Certificate (IDC) 

4. Basic Manners of Using Person Identification Certificate (IDC) 

5. Authentication Using Person Identification Certificate (IDC) 

6. Control of Permission of Usage of Content According to User Authentication on 
the Basis of Person Identification Certificate 

7. Link between Person Identification Certificates (IDCs) and Public Key 
Certificates (PKCs) 
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8. Using a Content on the Basis of Person Identification Certificate (IDC) and Public 
Key Certificate (PKC) 

9. One-Time Public Key Certificate (One-Time PKC) 

1 0 . Verification Certificate 

1 1 . Downloading of Person Identification Certificate (IDC) and Usage of a Content 

12. Setting the Validity Period of Person Identification Certificate (IDC) 
1 . Concepts of the Invention and Outline of Certificates 

1.1 Basic Concepts of the System According to the Invention 

First, basic concepts of the personal authentication system according to the present 
invention are described. In the present invention, authentication of a person is realized using a 
personal identification certificate (IDC). A personal identification certificate (IDC) is issued for 
each person v/ho wants to be certified by an identification authority (IDA), which is a reliable 
third-party agency, after verifying the identification of the person. 

Each personal identification certificate (IDC) includes information (template information) 
which identifies a corresponding person. Specific examples usable as personal identification 
information include fingerprint information, retina pattern information, iris pattern information, 
voice print information, and handwriting information. Personal identification information other 
than biometric information such as a seal, a passport, a driver's license, or a card can also be 
used. Any combination of the personal identification information described above can also be 
used. Furthermore, a combination of a password and any personal identification described above 
may also be used. That is, information that only a person himself/herself can possess is used as 
the personal identification information and is stored as template information wherein the 
template information is generally encrypted. 
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A personal identification certificate (IDC) issued by an identification authority (IDA) is 
used by a registered user himself/herself, a service provider (SP) v^hich provides a content to the 
registered user, or an agency or an organization (such as a settling financial institution) which 
needs to authenticate a user. A personal identification certificate (IDC) is also issued by the 
personal identification certificate authority (IDA) in response to a request fi'om a user device 
v^hich needs the personal identification certificate (IDC) for authentication of an user. Specific 
examples of manners of using personal identification certificates v^ll be described in detail later. 

Furthermore, in embodiments according to the present invention, a personal identification 
certificate (IDC) is effectively used in conjunction v^ith a public key certificate (PKC). For 
example, when a service provider (SP) distributes an encrypted content to an user, the service 
provider (SP) authenticates the user on the basis of a personal identification certificate (IDC), 
and the service provider (SP) transmits the encrypted content to the user only when the user is 
verified as an authorized user, wherein the content is encrypted using a public key described in a 
public key certificate so that only the authorized user can decrypt the content. 

Fig. 2 is a diagram illustrating encrypted data communication performed by a personal 
authentication system, using a public key certificate, according to the present invention. A 
personal identification certificate (IDC) and a public key certificate (PKC) are issued by an 
identification authority (IDA) 201 and a certificate authority (CA) 202, respectively, in 
accordance vsdth predetermined procedures. 

Encrypted data communication is performed, for example, between a user device A205 
and a service provider (SP) 203 which distributes a content. In the encrypted data 
communication, the service provider (SP) 203 first confirms that the user device A is used by a 
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user A and then transmits a content after converting the content into encrypted data which can be 
decrypted by the user A. 

The user A registers his/her personal information in the personal identification certificate 
authority (IDA) 201, and the personal identification certificate authority (IDA) 201 issues a 
personal identification certificate (IDC) to the user A. The service provider (SP) 203 verifies the 
authenticity of the user A on the basis of the personal identification certificate (IDC). In this 
case, the service provider (SP) 203 is an entity which executes personal authentication on the 
basis of the personal identification certificate (IDC). The authentication may be performed in 
various manners on the basis of an identification certificate, as will be described in detail later. 

The user A presents his/her public key to the certificate authority 202 and receives a 
public key certificate including a digital signature written by the certificate authority. After the 
service provider (SP) 203 authenticates the user A on the basis of the personal identification 
certificate (IDC), the service provider (SP) 203 extracts the public key from the public key 
certificate of the user A and transmits a content to the user A after encrypting the content using 
the extracted public key. When the user A of the user device A205 receives the encrypted 
content, the encrypted data is decrypted using a private key corresponding to the public key, and 
the decrypted data is used by the user A. 

Authentication and transmission of encrypted data are also performed in a similar manner 
between a service provider (SP) 204 serving as a settling institution and a user device B206. 
That is, the service provider (SP) 204 authenticates the user B on the basis of an identification 
certificate of the user B and transmits data (such as a content or electronic settlement data) after 
encrypting the data using a public key certificate of the user B. In this case, the user device is an 
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entity which executes personal authentication on the basis of the personal identification 
certificate (IDC). 

Furthermore, in data communication between the user device A205 and the user device 
B206, authentication of users A and B is performed on the basis of the personal identification 
certificates of users A and B, and data is transmitted by means of encryption using the pubUc key 
certificate of the use A or B. 

As described above, identification certificates and public key certificates can be used in 
various situations in which data is transmitted. A personal identification certificate can also be 
used singly. For example, when a user accesses secret information stored in a PC, the 
authenticity of the user is verified on the basis of a personal identification certificate. A wide 
variety of entities, such as a service provider (SP), a user device, and a personal identification 
certificate authority (IDA), execute personal authentication on the basis of a personal 
identification certificate. 

In an embodiment of a system according to the present invention, as shown in Fig. 2, a 
personal identification certificate (IDC) issued by a personal identification certificate authority 
(IDA) 201 is linked with a public key certificate (PKC) issued by a certificate authority 202. The 
link may be achieved by incorporating a public key certificate (PKC) into a personal 
identification certificate or by creating group information indicating link information. Manners 
of forming links will be described in detail later. 

In the public key cryptography described above, different keys are used by a sender and a 
receiver, wherein one of the keys is used as a public key which are opened for use by any 
unspecified user, while the other key is used as a private key which is kept secret. In the public 
key cryptography, unlike the symmetric key cryptography in which encryption and decryption 
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are performed using a symmetric key, only a particular one person has a private key which 
should be kept secret, and thus it is easy to manage keys. A representative example of a public 
key encryption algorithm is the RSA (Rivest-Shamir-Adleman) encryption algorithm. In this 
technique, a product of two very large prime numbers (for example, 150-digit prime numbers) is 
used because it is difficult to factorize the product of two very large prime numbers (such as 150- 
digit prime numbers) into prime numbers. 

In the public key cryptography, a large number of unspecified users are allowed to use 
the same public key, and the validity of a distributed public key is generally certified by a 
certificate called a public key certificate. For example, a user A creates a pair of a public key 
and a private key and sends the created public key to a certificate authority to acquire a public 
key certificate fi"om the certificate authority. The user A opens the public key certificate to the 
public. An unspecified user acquires the public key from the public key certificate via a 
predetermined procedure and transmits, to the user A, a document or the like after encrypting it 
using the public key. Upon reception of the document, the user A decrypts the received 
document using the private key. The user A may also attach his/her signature encrypted with the 
private key to a document or the like, and unspecified user may verify the signature using the 
public key extracted from the public key certificate via the predetermined procedure. Before 
describing the personal authentication system according to the present invention in fiirther detail, 
the data structures of the public key certificate (PKC) and the personal identification certificate 
(IDC) used in the system of the present invention are described. 

1.2 Public Key Certificate 

Public key certificates are described with reference to Figs. 3 and 4. In the public key 
cryptography, a public key certificate is issued by a certificate authority (CA) which is also 
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called an issuer authority (lA), wherein in response to receiving an ID and a public key from an 
user, the certificate authority issues a certificate after adding information such as an ID of the 
certificate authority and a validity period and also adding a signature of the certificate authority. 

An example of a format of a public key certificate is described. In this specific example, 
the format is according to the public key certificate format X.509 V3. 

Version indicates the version of the certificate format. 

Serial Number indicates a serial number assigned by a public key issuer authority (lA) to 
a public key certificate. 

Signature algorithm Identifier and algorithm parameters are fields in which the signature 
algorithm of the public key certificate and parameters thereof are described. Either the elliptic 
curve cryptography or the RS A can be used as the signature algorithm, wherein in the case where 
the elliptic curve cryptography is employed, parameters and the key length are described, while 
the key length is described in the case where the RSA is employed. 

Issuer is a field in which the issuer of the public key certificate, that is, the name of the 
public key certificate issuer (lA) is described in the form of a distinguished name. 

Validity is a field to describe a period during which the certificate is valid, wherein a start 
date and an expiration date are described. 

Subject is a field in which the name of a subject or a user is described. More specifically, 
for example, the ID of a user device or the ID of a subject which supplies services is described. 

In subject Public Key Info, algorithm and subject Public key, information about the 
public key of the user including the key algorithm is described. 
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The fields described above are defined in the pubHc key certificate format X.509 VI, and 
fields described below are fields added thereto according to the public key certificate format 
X.509 V3. 

In authority Key Identifier, key Identifier, authority Cert Issuer, authority Cert Serial 
Number, information which identifies the key of the public key certificate issuer (lA) is 
described, wherein, more specifically, a key identification number (octal number), the name of 
the public key issuer authority (lA), and a certificate number are described. 

In subject key Identifier, identifiers are described in the case where a plurality of keys are 
certified in the public key certificate. 

Key usage is a field to specify the purpose of the key, wherein a purpose is selected from 
the group consisting of (0) digital signature, (1) prevention of repudiation, (2) encryption of the 
key, (3) encryption of a message, (4) distribution of a symmetric key, (5) verification of the 
signature of the certificate, and (6) verification of the signature of a revocation list. 

In private Key Usage Period, a period is described during which the private key of the 
user is valid. 

In certificate Policies, certificate policies of certificate authorities, that is, the public key 
certificate issuer authority (lA) and the registration authority (RA), are described. For example, 
a policy ID or a certification criterion according to the ISO/IEC9384-1 is described. 

Policy Mapping is described only when a CA (public key certificate issuer (lA)) is 
certified, wherein mapping is described in terms of the policy of the public key certificate issuer 
(lA) which issues the certificate and the policy of the certificate authority which is certified. 

In supported Algorithms, attributes of a directory (X.500) are defined. This field is used, 
in communication, to inform a receiving party of the attribute of the directory. 
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Subject Alt Name is a field to describe an alternative name of the subject. 
Issuer Alt Name is a field to describe an alternative name of the certificate issuer. 
Subject Direction Attribute is a field in which an arbitrary attribute of the user is 
described. 

Basic Constraint is a field to describe whether the public key to be certified is used for 
signature of the certificate authority (public key certificate issuer authority (lA)) or is used by the 
user. 

Name Constraints permitted Subtrees is a field to describe the area where the certificate is 
effective, wherein this field is used only when a certificate authority (public key certificate 
authority (CA)) is certified. 

In policy Constraints, constraints are described in terms of requirements of explicit policy 
ID or inhibit policy mapping for the remaining certification path. 

CRL (Certificate Revocation List) Distribution Points is a file to describe a reference 
point in the revocation list (Fig. 9) at which data is present which indicates whether the 
certificate of a user is revoked, wherein this field is used to confirm, when the user uses the 
certificate, that the certificate is not revoked. 

Signature is a field in which a signature of the public key certificate issuer (public key 
certificate authority (lA) is written. The signature is data which is created by generating a hash 
value by applying a hash function to the whole of a certificate and then encrypting the resultant 
hash value using a public key of a certificate authority, 

A certificate authority issues a public key certificate in the format shovm in Figs. 3 and 4 
and also updates a public key certificate which has expired. Furthermore, the certificate 
authority generates, manages, and distributes an illegal user list (revocation list) to shut out users 
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who have made an illegal act. The certificate authority also generates a public key and a private 
key, as required. 

When a user uses the public key certificate, the user verifies the digital signature of the 
public key certificate using the public key of the certificate authority the user has. If the 
verification of the digital signature is successfully passed, the user extracts the public key from 
the public key certificate. Therefore, all users, who want to use the public key certificate, need 
to have the common public key of the certificate authority. 

1 .3 Person Identification Certificate 

Each personal identification certificate (IDC) used in the personal authentication system 
according to the present invention includes information which identifies a person (hereinafter, 
this personal identification information included in the IDC is referred to as template 
information). An example of template information is biometric information of a person such as 
fingerprint information, retina pattern information, iris pattern information, voice print 
information, and handwriting information. Personal identification information other than 
biometric information is also usable. Specific examples of such personal identification 
information include a seal, a passport, a driver's license, and a card. Any combination of the 
personal identification information described above can also be used. Furthermore, a 
combination of a password and any personal identification described above may also be used. 
That is, information that only a person himself/herself can possess is used as the personal 
identification information. It is desirable that the template information be stored in the IDC after 
being encrypted so as to prevent the template information from being leaked to an unauthorized 
third party. However, encryption of the template is not necessarily required if the distribution of 
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the personal identification certificate is very limited and if the template is thus prevented from 
being leaked. 

A digital signature of a personal identification authority (IDA) is written in a personal 
identification certificate (IDC) so that the personal identification certificate is prevented from 
being tampered with. 

Fig. 5 illustrates an example of a personal identification certificate format. The personal 
identification certificate format shown in Fig. 5 includes indispensable item fields, extended item 
fields, and a signature field. The respective items are described below. 

First, the respective fields of the indispensable items are described. 

Version indicates the version of the certificate format. 

Serial Number indicates a serial number assigned by a personal identification authority 
(IDA) to a personal identification certificate (IDC). 

In Signature algorithm Identifier algorithm parameter, the signature algorithm of the 
personal identification certificate and parameters thereof are described. 

Either the elliptic curve cryptography or the RSA can be used as the signature algorithm, 
wherein in the case where the elliptic curve cryptography is employed, parameters and the key 
length are described, while the key length is described in the case where the RSA is employed. 

Issuer is a field in which the issuer of the personal identification certificate, that is, the 
name of the personal identification certificate authority (IDA) is described in the form of a 
distinguished name. 

Validity is a field to describe a period during which the certificate is valid, wherein a start 
date and an expiration date are described. 
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Subject is a field in which the name of a subject or a user is described. In this field, more 
specifically, the ID or the name of the user is described. 

Subject Template Info is a field to describe identification information of an user, wherein 
data representing biometric information such as a fingerprint of the user is stored after being 
encrypted. More specifically, the encryption algorithm used to encrypt the template, the imique 
identifier (ID) or the certificate number of the public key certificate used in encryption, an 
encryption algorithm, a parameter, a start date and an expiration date indicating the validity 
period of the template, the type of the template, and the template (encrypted) are described. 

The fields described above are set as the indispensable item fields. 

Now, extended fields of the personal identification certificate (IDC) are described. 

Subject PKC info is a field to describe the public key certificate information of the 
subject to be certified, including the certificate number of the public key certificate of the subject 
and the subject unique ID of the public key certificate of the subject. 

In Issuer Unique ID, the imique ID of the personal identification certificate authority 
(IDA) is described. 

In Subject Unique ID, the unique ID of the subject to be certified is described. 
In Public Key Certificate, the public key certificate described above is stored. 
In Issuer Alt Name, an alternative name of the personal identification certificate authority 
is described. 

In Subject Directory Attribute, an arbitrary attribute of an user, such as an age, sex, 
address, telephone number, is encrypted as required to identify the user. 
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Valid Count is a field to describe the maximum number of times the personal 
identification certificate is allowed to be used. More specifically, after a certificate is issued, the 
certificate is allowed to be used as many times as described in this field. 

In Control Table link Info, group information indicating the link between the personal 
identification certificate (IDC) and the public key certificate (PKC) is described. For example, 
information is described which indicates a link to a public key certificate used in data 
communication or data processing which is executed only when a user is successfully 
authenticated on the basis of the personal identification certificate. The link information and the 
group information will be described in detail later. 

The extended fields of the personal identification certificate (IDC) have been described 

above. 

The digital signature is data which is created by generating a hash value by applying a 
hash function to all fields of the certificate and then encrypting the resultant hash value using the 
public key of the personal identification certificate authority (IDA). 

Other information may also be described in the extended fields of the personal 
identification certificate (IDC). For example, when the template information is encrypted using 
not the public key but a common private key, and the common key used in the encryption is 
encrypted using the public key of the user device, the service provider, or the personal 
identification certificate authority (IDA), the encrypted public key is described in an extended 
field. The process performed in this case will be described later. 

2 . Encryption of Template 

The personal identification certificate (IDC) described above includes information 
(template information) used to identify a person. An example of template information is 



-40- 



biometric information of a person such as fingerprint information, retina pattern information, iris 
pattern information, voice print information, and handwriting information. Personal 
identification information other than biometric information is also usable. Specific examples of 
such personal identification information includes a seal, a passport, a driver's license, and a card. 
Any combination of the personal identification information described above can also be used. 
Furthermore, a combination of a password and any personal identification described above may 
also be used. That is, information that only a person himself/herself can possess is used as the 
personal identification information. 

It is desirable that the template be stored after being encrypted to prevent the template 
fi-om being leaked to a third party, unless the distribution of the certificate is limited so as to keep 
a secret. The manners of encrypting and storing a template are described below. 

A template may be stored and encrypted in various manners as described below. 

1) The template is stored without being encrypted. 

2) The template is encrypted using the public key of the user (identified by the 
personal identification certificate). 

3) The template is encrypted using the symmetric key Kt, and the symmetric key Kt 
is encrypted using the public key of the user. 

4) The template is encrypted using a public key of a service provider (SP) (which 
identifies a user to which a service is to be provided, by means of using a personal identification 
certificate). 

5) The template is encrypted using the symmetric key Kt and the symmetric key Kt 
is encrypted using the public key of the service provider (SP). 
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6) The template is encrypted using the pubUc key of the personal identification 
certificate authority (IDA). 

7) The template is encrypted using the symmetric key Kt, and the symmetric key Kt 
is encrypted using the public key of the personal identification certificate authority (IDA). 

The template may be stored after being encrypted or without being encrypted in one of 
the above manners, each of which will be described in further detail below with reference to 
Figs. 6, 7, and 8. Fig. 6A illustrates an example in which a template is not encrypted, and data 
representing biometric information such as a fingerprint acquired via a personal identifying 
apparatus is directly stored as template information in a personal identification certificate (IDC). 

Figs. 6B illustrate an example in which encryption and decryption are performed using 
only a public key, wherein in encryption shovra in Fig. 6B, a template of a user acquired as 
identification information via a personal identifying apparatus is encrypted using a public key of 
the user or a user device, a public key of a service provider (SP) (which identifies a user to which 
a service is to be provided, by means of using a personal identification certificate), or a public 
key of a personal identification certificate authority (IDA). Encryption may be performed in 
accordance with, for example, the elliptic curve cryptography (ECC) or the RSA (Rivest-Shamir- 
Adleman) cryptography. The encrypted template is stored in the personal identification 
certificate (IDC), together with the identifier (unique ID) of the public key and data indicating 
the encryption algorithm employed in the encryption of the template. 

The public key used herein is a public key which can be identified by the unique ID of 
the public key. The unique ID of the public key is information which can identify a public key 
certificate, wherein specific examples include a user ID and a user name stored in a public key 
certificate. The public key used herein is selected, depending upon the manner in which the 
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personal identification certificate (IDC) is used, from the group consisting of the public key of 
the user, the public key of the service provider (SP) (which identifies a user to v^hich a service is 
to be provided, by means of using a personal identification certificate), and the public key of the 
personal identification certificate authority (IDA). 

Fig. 7 shows various manners of using a public key to encrypt a template. In the case of 
a personal identification certificate (IDC) in which a public key of a user or a user device is used 
to encrypt a template, an example of usage of the personal identification certificate (IDC) is to 
identify a particular user who is authorized to use a user device (such as a PC). When a user 
wants to use a PC, the template stored in the personal identification certificate (IDC) is decrypted 
using the private key of the user and is compared with an input template to verify the authenticity 
of the user. 

An example of usage of a personal identification certificate (IDC) in which a template is 
encrypted using a public key of a service provider is to identify a particular user to whom a 
service is to be provided by the service provider. The service provider extracts the encrypted 
template information from a personal identification certificate (IDC) of an user, which is stored 
in the service provider or transmitted from the user or the personal identification certificate 
authority (IDA), and the service provider decrypts the encrypted template information using the 
private key of the service provider. The service provider then compares the decrypted template 
with sampling information (such as fingerprint data) presented by a person to be verified. 

A personal identification certificate (IDC) in which a template is encrypted using a public 
key of the personal identification certificate (IDC) is used, for example, in data transmission 
between terminals, to identify transmitting and receiving users on the basis of the personal 
identification certificate (IDC) issued by the personal identification certificate authority (IDA). 
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As described above, the template information is encrypted in a different manner depending upon 
the usage of the personal identification certificate (IDC). 

Fig. 6C shows a process of decrypting a template encrypted with a public key. An 
encrypted template is extracted from a personal identification certificate (IDC), and then data 
indicating the encryption algorithm and the unique ID of a public key are extracted. 
Furthermore, a private key corresponding to the public key specified by the public key unique ID 
is extracted, and the encrypted template is decrypted using the extracted private key thereby 
extracting the template. Each entity which executes the person verification, such as a user device 
or a service provider which verifies an user, includes an encryption unit for decrypting and 
encrypting data. 

Figs. 8 A and 8B are diagrams each illustrating a manner of encrypting and decrypting a 
template of a personal identification certificate (IDC), using a symmetric key and a public key. 
Fig. 8A illustrates an encrypting process. First, for example, in a personal identification 
certificate authority (IDA) which wants to generate encrypted template information, a symmetric 
key is generated using a random number, and a template input via a personal identifying 
apparatus is encrypted using the symmetric key. Furthermore, a public key employed, that is, 
one of a public key of the user or of a user device, a public key of a service provider (SP), and a 
public key of the personal identification certificate authority (IDA) is encrypted using the 
symmetric key. The public key is selected depending upon the usage marmer described above 
with reference to Fig. 7. 

The resultant encrypted template and encrypted symmetric key are stored in the personal 
identification certificate (IDC) together with the identifier (unique ID) of the public key and the 
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data indicating the encryption algorithm applied to the encryption of the template and the 
encryption of the symmetric key. 

Fig. 8B illustrates a decrypting process using the symmetric key and the private key. The 
encrypted template is extracted from the encrypted template information of the personal 
identification certificate (IDC). Furthermore, the encrypted symmetric key, the data indicating 
the encryption algorithm, and the public key unique ID are extracted. The encrypted symmetric 
key is decrypted using the private key specified by the public key specified by the public key 
unique ID, and the encrypted template is decrypted using the symmetric key obtained via the 
above decryption process, thereby extracting the template. 

3. Registration and Change of Template and Personal Identification Certificate 

(IDC) 

Processes of registering, deleting, changing, adding, suspending, and canceling of 
suspension of a personal identification certificate (IDC) in which data is described in the above- 
described manner are described below. Herein, the suspending of an IDC is a process of 
temporarily invalidating the IDC, and the canceling of suspension is a process of re-validating 
the temporarily suspended IDC. 

3 . 1 Registration of Template 

To effectively register a personal identification certificate (IDC), a person to be certified 
with a personal identification certificate (IDC) first presents sampling information to register 
his/her template. As described earlier, an example of template information is biometric 
information of a person such as fingerprint information, retina pattern information, iris pattern 
information, voice print information, and handwriting information. Personal identification 
information other than biometric information is also usable. Specific examples of such personal 
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identification information includes a seal, a passport, a driver's license, and a card. Any 
combination of the personal identification information described above can also be used. 
Furthermore, a combination of a password and any personal identification described above may 
also be used. That is, information that only a person himseldierself can possess is used as the 
personal identification information. 

Fig. 9 illustrates a flow in terms of registration of a template and creation of an IDC. 
Registration of a template is performed on the basis of information (sampling information) 
acquired using an apparatus capable of acquiring personal information in one of the various 
forms described earlier. For example, in the case where fingerprint information is used as a 
template, a fingerprint reading apparatus is used, while a voice print acquisition apparatus is used 
in the case where voice print information is used as a template (SU). The acquired data is 
transmitted online or offline to a personal identification certificate authority (IDA) (SI 2). A user 
transmits his/her personal information (PIN) identifying the user to the personal identification 
certificate authority (IDA) (SI 3). 

In the case where the data described above are transmitted online, mutual authentication 
is performed between the device of the user and the personal identification certificate authority 
(IDA), wherein data is transmitted together with a digital signature, and the signature is verified 
at a receiving end. The personal identification certificate authority (IDA) checks the data to 
confirm that the data has not been tempered with, identifies the user, and verifies the data (SI 4). 
If it is determined that the data are not valid, error handling is performed (SI 7) without 
performing registration. 

In the registration of the template, the personal identification certificate authority (IDA) 
verifies the identification of the user on the basis of user identification data which identifies the 
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user. The personal identification certificate authority (IDA) also acquires personal information 
such as an address or a telephone number, as required. After verifying the identification of the 
user and the verifying other necessary data, the personal identification certificate authority (IDA) 
assigns a personal identifier to the template and stores it in a database (SI 5). The personal 
identification certificate authority (IDA) encrypts the template using the public key of the 
personal identification certificate authority (IDA) and creates a personal identification certificate 
(IDC) in which the encrypted template is stored (SI 6). The key used to encrypt the template 
stored in the IDC may be different depending upon the location v^here the IDC is used, that is, 
depending upon the entity which executes authentication of a person. For example, a public key 
of a service provider or a user device is used depending upon the situation. 
3 . 2 Deleting of Template 

A template registered in a personal identification certificate authority (IDA) may be 
deleted by performing a template deleting process. The deleting process is performed in 
response to a deleting request issued by a user. Fig. 10 shows a flow of the template deleting 
process. When a user requests deletion of a template (S21), the user submits his/her 
identification data which identifies the user to a personal identification certificate authority 
(IDA) (S22). Furthermore, the user transmits his/her personal information (PIN) used for 
identification to the personal identification certificate authority (IDA) (S23). 

In the case where the data described above are transmitted online, mutual authentication 
is performed between the device of the user and the personal identification certificate authority 
(IDA), wherein data is transmitted together with a digital signature, and the signature is verified 
at a receiving end. The personal identification certificate authority (IDA) checks the data to 
confirm that the data have not been tempered with, identifies the user, and verifies the data 
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(S24). If it is determined that the data are not valid, error handUng is performed (S27) without 
performing the deleting process. 

After identifying the user on the basis of the personal identification data to confirm that 
the request has been issued by the user himself/herself (824), the personal identification 
certificate authority (IDA) deletes the requested template and the associated personal 
identification data and other additional information (S25). Furthermore, the personal 
identification certification authority (IDA) deletes the personal identification certificate (IDC) in 
which the template was present, and registers the deleted IDC in a revocation list (S26). More 
specifically, the IDC identifier corresponding to the deleted IDC is registered in the revocation 
list. 

3.3 Changing of Template 

A template registered in a personal identification certificate authority (IDA) may be 
changed by performing a template changing process. Fig. 1 1 illustrates a flow of the template 
changing process. A user submits a template changing request to a personal identification 
certificate authority (IDA) (S31), creates sampling information or the like used to create a new 
template (S32), and transmits identification data identifying the user and additional information 
(PIN) as required to the personal identification certificate authority (IDA) (S33, S34). The 
personal identification certificate authority (IDA) identifies the user on the basis of the 
identification data (S35), deletes the personal identification certificate (IDC) based on the current 
template (S36), and registers the deleted IDC in the revocation list (S37). Furthermore, the 
personal identification certificate authority (IDA) assigns an identification number to the new 
template and stores it in the database (S38), encrypts the template using the public key of the 
personal identification certificate authority (IDA), and creates a personal identification certificate 
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(IDC) in which the encrypted template is stored (S39). In on-line data communication between 
the user device and the personal identification certificate authority (IDA), mutual authentication, 
addition of a signature to data to be transmitted, and verification of the signature are performed 
in a similar manner to the processes described above. 

3.4 Addition of Template 

A user may add another identification data as an additional template to the template 
which has been already registered in a personal identification certificate authority (IDA). Fig. 12 
illustrates the template addition process. A user issues a template addition request to a personal 
identification certificate authority (IDA) (S41), creates a new template using a template 
acquisition apparatus (S42), and transmits it together with identification data to the personal 
identification certificate authority (IDA) (S43, S44). The personal identification certificate 
authority (IDA) verify the received identification data (S45) to authenticate the user, assigns a 
personal identifier (number) to the template to be added and stores it in the database (S46), 
encrypts the template to be added using the public key of the personal identification certificate 
authority (IDA), and creates a personal identification certificate (IDC) in which the encrypted 
template is stored (S47). In on-line data communication between the user device and the 
personal identification certificate authority (IDA), mutual authentication, addition of a signature 
to data to be transmitted, and verification of the signature are performed in a similar manner to 
the processes described above. 

3 . 5 Suspension of Template 

A template registered in a personal identification certificate authority (IDA) may be 
suspended temporarily in response to a suspension request issued from a user. Fig. 13 illustrates 
a flow of a template suspension process. If a user issues a template suspension request to a 
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personal identification certificate authority (IDA) (S51) and submits identification data and 
additional data to the personal identification certificate authority (IDA) (S52, S53), the personal 
identification certificate authority (IDA) identifies the user on the basis of the identification data 
(S54) and suspends the validity of the requested template of the user and the associated 
identification data and additional data (S55). In this suspension process, the personal 
identification certificate authority (IDA) also revokes the personal identification certificate (IDC) 
of that user and registers it in the invalidated IDC list (S56). More specifically, the IDC 
identifier corresponding to the deleted IDC is registered in the invalidated IDC list. In on-line 
data communication between the user device and the personal identification certificate authority 
(IDA), mutual authentication, addition of a signature to data to be transmitted, and verification of 
the signature are performed in a similar manner to the processes described above. 
3.6 Cancellation of Suspension of Template 

A template whose validity was suspended via the suspension process may be re-validated 
in response to a suspension cancel request issued by an user. Fig. 14 illustrates a template 
suspension canceling process. A user issues a template suspension cancel request to a personal 
identification certificate authority (IDA) (S61) and submits identification data and additional 
information to the personal identification certificate authority (IDA) (S62, S63). After verifying 
identification of the user on the basis of the identification data (S64), the personal identification 
certificate authority (IDA) cancels the suspension of validity of the requested template of the 
user and the associated identification data and additional information (S65). Furthermore, the 
personal identification certificate authority (IDA) removes the personal identification certificate 
(IDC) of that user from the invalidated IDC list (S66). More particularly, the corresponding IDC 
identifier is removed from the invalidated IDC list. In on-line data communication between the 
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user device and the personal identification certificate authority (IDA), mutual authentication, 
addition of a signature to data to be transmitted, and verification of the signature are performed 
in a similar maimer to the processes described above. 

3.7 Distribution of Person Identification Certificate (IDC) 

Distribution of a personal identification certificate (IDC) created on the basis of a 
template registered after being supplied from a user is described below. 

Fig. 15 illustrates a flow of a process of distributing a personal identification certificate 
(IDC) to service providers (SPs). A service provider who wants to use a personal identification 
certificate (IDC) makes, in advance, a contract including a rule of using IDCs with a personal 
identification certificate authority (IDA) (S71). Thereafter, mutual authentication is performed 
between the personal identification certificate authority (IDA) and the service provider (SP) 
(S72). The mutual authentication may be performed, for example, via a process using symmetric 
key encryption or public key encryption. 

If a success is achieved in mutual authentication, the service provider (SP) transmits to 
the personal identification certificate authority (IDA) a request for issuing a personal 
identification certificate (IDC) together with user identification data or data indicating the name 
of a user to whom a service is to be provided and also data indicating the desired policy of the 
personal identification certificate (IDC) (S73). The personal identification certificate authority 
(IDA) verifies the personal identification certificate issuing request (S74), sets the policy of the 
personal identification certificate (IDC) in accordance with the usage rule (S75), extracts the 
requested personal identification certificate (IDC) of the user from the database, decrypts the 
user template encrypted with the public key of the personal identification certificate authority 
(IDA), encrypts the user template using the public key of the service provider (S76), creates a 
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personal identification certificate (IDC) according to the policy (S77), and supplies the created 
IDC to the service provider (SP) (S78). In the case v^here the template stored in the database is 
not encrypted, or in the case where encryption is not required, the encryption of the template is 
not necessary. 

3.8 Updating of Person Identification Certificate (IDC) 

Nov^, a process of updating a personal identification certificate (IDC) created on the basis 
of a registered template of a user is described below^. In most cases, updating is performed to 
reset the validity period of a personal identification certificate (IDC) being used. 

Fig. 16 illustrates a flow performed in response to a personal identification certificate 
(IDC) updating request issued fi^om a service provider (SP). A service provider who wants to 
use a personal identification certificate (IDC) makes, in advance, a contract including a rule of 
using IDCs with a personal identification certificate authority (IDA) (S81). Thereafter, mutual 
authentication is performed between the personal identification certificate authority (IDA) and 
the service provider (SP) (S82). The mutual authentication may be performed, for example, via a 
process using symmetric key encryption or public key encryption. 

If a success is achieved in the mutual authentication, the service provider (SP) transmits 
to the personal identification certificate authority (IDA) a request for updating a desired personal 
identification certificate (IDC) (S83). The personal identification certificate authority (IDA) 
verifies the updating request (S84), sets the policy of the personal identification certificate (IDC) 
in accordance v^th the usage rule (S85), extracts the requested personal identification certificate 
(IDC) of the user from the database, decrypts the user template encrypted with the public key of 
the personal identification certificate authority (IDA), encrypts the user template using the public 
key of the service provider, creates a personal identification certificate (IDC) according to the 



-52- 



policy (S86), sets the validity period, and supplies the created IDC to the service provider (SP) 
(S87). In the case where the template stored in the database is not encrypted, or in the case 
where encryption is not required, the encryption of the template is not necessary. 
(3.9 Deleting of Person Identification Certificate (IDC)) 

Deleting of a personal identification certificate (IDC) created on the basis of a template 
registered after being supplied from a user is described below. 

Fig. 17 illustrates a process performed in response to a personal identification certificate 
(IDC) deleting request issued by an user. When a user wants to delete a personal identification 
certificate (IDC), the user transmits to a personal identification certificate authority (IDA) a 
request for deleting a particular personal identification certificate (IDC) (S91). The personal 
identification certificate authority (IDA) verifies the deleting request (S92) and deletes the 
specified personal identification certificate (IDC) (S93). 

(3.10 Inquiring about Person Identification Certificate (IDC)) 

Inquiring about a personal identification certificate (IDC) created on the basis of a 
template registered after being supplied from a user is described below. Inquiring is performed, 
for example, when a service provider (SP), who does not have a personal identification 
certificate (IDC), transmits sampling data received from a user to a personal identification 
certificate authority (IDA) to inquire about the authenticity of the user. In response to the 
inquiry, the personal identification certificate authority (IDA) verifies the authenticity of the user 
on the basis of the personal identification certificate (IDC) stored in the personal identification 
certificate authority (IDA), and the personal identification certificate authority (IDA) returns 
only the authentication result to the service provider. 
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Fig. 1 8 illustrates a flow of a process performed in response to a personal identification 
certificate (IDC) inquiry request issued by a service provider (SP). A service provider, v^ho 
wants to make an inquiry in terms of a personal identification certificate (IDC), makes a contract 
including a usage rule of personal identification certificates (IDCs) with a personal identification 
certificate authority (IDA) (SOI). Thereafter, mutual authentication is performed between the 
personal identification certificate authority (IDA) and the service provider (SP) (S02). The 
mutual authentication may be performed, for example, via a process using symmetric key 
encryption or public key encryption. 

If a success is achieved in the mutual authentication, the service provider (SP) transmits 
to the personal identification certificate authority (IDA) a request for inquiry about a personal 
identification certificate (IDC) of a particular user together with sampling data or the like of that 
user (803, S04). The personal identification certificate authority (IDA) verifies the inquiry 
request (SOS), verifies the received sampling data on the basis of the corresponding personal 
identification certificate (IDC) (S06), and transmits a verification result (OK or NG) to the 
service provider (SP) (S07). 

4. Basic Manners of Using Person Identification Certificate (IDC) 

Basic manners of using a personal identification certificate (IDC) are described below. In 
particular, relationships between a certificate authority (CA) which issues a public key certificate 
(PKC), a personal identification certificate authority (IDA) which issues a personal identification 
certificate (IDC), and a device which uses those certificates are described. 

Figs. 19 and 20 illustrate two examples of systems including a certificate authority (CA) 
which issues a public key certificate (PKC), a personal identification certificate authority (IDA) 
which issues a personal identification certificate (IDC), and a device which uses those 
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certificates. In the example shown in Fig. 19, a comparison between sampling information and a 
template of a personal identification certificate (IDC) is made by a personal identification 
certificate authority (IDA), while a comparison between sampling information and a template of 
a personal identification certificate (IDC) is made by a service provider (SP) or a user device 
(UD) in the example shovm in Fig. 20. 

In Fig. 19, the user device (UD) or the service provider (SP) 300 includes a sampling 
information processing unit 310 for acquiring personal information such as fingerprint data of 
various users and processing the acquired personal information, wherein the sampling 
information processing unit 310 includes a personal information acquisition unit 314 for 
acquiring sampling information, an information converter 313 for converting fingerprint data or 
the like into a code, and a communication unit 312 for transmitting the converted code to a 
personal identification certificate authority 320, and wherein the sampling information 
processing unit 310 stores a public key certificate for use in encryption/decryption of data in 
various communication processes. A controller 311 controls the operations of the personal 
information acquisition unit 314, the information converter 313, and the commimication unit 
312. 

The personal identification certificate authority (IDA) 320 includes a comparator 321 and 
storage means 322, wherein the comparator compares sampling data received from the user 
device (UD) or the service provider (SP) 300 with a template, stored in the storage means, of a 
user to be certified (preferably, the template is encrypted and stored in the personal identification 
certificate). The storage means stores, in addition to templates, data indicating the history of 
issuing personal identification certificates and data indicating the history of comparison. 
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A certificate authority (CA) 330 is an agency which issues a public key certificate (PKC) 
of a user in response to a request from the user, wherein the pubUc key certificate includes a 
signature of the certificate authority. The certificate authority stores and manages data indicating 
the history of issuing public key certificates and the verification history. 

If the personal identification certificate authority (IDA) 320 receives sampling 
information from the user device (UD) or the service provider (SP) 300, the personal 
identification certificate authority (IDA) 320 compares the received sampling information with a 
stored template, wherein an OK or NG message is transmitted as a comparison result to the user 
device (UD) or the service provider (SP) 300 depending upon whether the received sampling 
information matches with the stored template. Herein, a verification certificate in a 
predetermined format may be issued, as will be described later. In the case where a verification 
certificate is issued, the personal identification certificate authority describes the history of 
issuing verification certificates. 

Communication among the certificate authority (CA), the personal identification 
certificate authority (IDA) 320, and the user device (UD) or the service provider (SP) 300 is 
performed only when a success is achieved in mutual authentication, wherein it is desirable that 
secret data be encrypted using a session key created via the mutual authentication or using public 
keys of two parties. 

In the case of the system shown in Fig. 20, a comparison between sampling information 
and a template of a personal identification certificate (IDC) is made by a service provider (SP) or 
a user device (UD). 

The user device (UD) or the service provider (SP) 400 shown in Fig. 20 includes a 
verification system 410 for acquiring personal information such as fingerprint of various users 
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and performing verification, wherein the verification system 410 includes a general memory 413 
for storing personal identification certificates, a personal identification certificate verification 
unit 414 for checking whether a personal identification verification has been tempered with, a 
template decryption unit 415 for decrypting an encrypted template described in a personal 
identification certificate, a personal information acquisition unit 418 for acquiring sampling 
information such as fingerprint data, an information converter 417 for converting fingerprint data 
or the like into a code, a comparator 416 for comparing the decrypted template with the coded 
sampling information, a commimication unit 411 for communication with a personal 
identification certificate authority 420, and an encryption/decryption unit 419 including a 
signature generator and storing public key certificates and a public key for use in 
encryption/decryption of data in various commimication processes. A controller 412 controls the 
operation of the respective units. 

The personal identification certificate authority (IDA) 420 includes a personal 
identification certificate issuing unit 421 and a storage means 422, and the personal identification 
certificate authority (IDA) 420 issues a personal identification certificate in which a template of a 
person to be certified is stored, in response to a request from the user device (UD) or the service 
provider (SP) 400. The storage means 422 stores templates, personal identification certificates, 
data representing the history of issuing personal identification certificates, and data representing 
the history of verification. 

A certificate authority (CA) 430 is an agency which issues a public key certificate (PKC) 
of a user in response to a request from the user, wherein the public key certificate includes a 
signature of the certificate authority. The certificate authority stores and manages data indicating 
the history of issuing public key certificates and the verification history. 
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As in the system shown in Fig. 19, communication among the certificate authority (CA), 
the personal identification certificate authority (IDA) 320, and the user device (UD) or the 
service provider (SP) 300 is performed only when a success is achieved in mutual authentication, 
wherein it is desirable that secret data be encrypted using a session key created via the mutual 
authentication or using public keys of two parties. 

5. Authentication Using Person Identification Certificate (IDC) 

Various manners of authentication using a personal identification certificate (IDC) are 
described below. The authentication using a personal identification certificate (IDC) can be 
classified into two modes described below. 

5.1 On-Line Mode 

Static IDC Verification 

A template of a personal identification certificate (IDC) is encrypted using a public key 
of a site at which verification is performed, such as a personal identification certificate authority 
(IDA), a service provider (SP), or a user device (PC), and is registered and stored in a personal 
identification certificate authority (IDA). In response to a request fi:om the service provider (SP) 
or the user device (PC), the personal identification certificate authority (IDA) supplies the IDC 
for verification. 

Dynamic IDC Verification 

A template of a personal identification certificate (IDC) is encrypted using a public key 
of a personal identification certificate authority (IDA) and registered in the IDA. In response to 
a request fi-om a service provider (SP) or a user device (PC), the template is re-encrypted using a 
public key of a site such as the SP or the PC at which verification is performed, that is, using a 
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public key of an entity which performs personal verification, and the personal identification 
certificate (IDC) is dynamically distributed for verification. 

5.2 Off-Line Mode 

Static E)C Verification 

A template of a personal identification certificate (IDC) is encrypted using a public key 
of a site at which verification is performed, such as a personal identification certificate authority 
(IDA), a service provider (SP), or a user device (PC), that is, using a public key of an entity 
which performs personal verification, or a template is encrypted using a symmetric key and this 
symmetric key is encrypted using a public key of a personal identification certificate authority 
(IDA), a service provider (SP) or a user device (PC) and is registered in a personal identification 
certificate authority (IDA) and distributed to each user. When personal verification is 
performed, an IDC and sampling information are transmitted to a site at which verification is 
performed. The verification processes in the respective modes are described below. 

5.1.1 On-Line Mode Static Verification 

In on-line mode static verification, when sampling data input by a person is compared, 
for verification, with a template of a personal identification certificate (IDC), the personal 
identification certificate (IDC) is dynamically issued by a personal identification certificate 
authority (IDA), and comparison for verification is performed in a system, that is, by a user 
device (PC), a service provider (SP), or a personal identification certificate authority (IDA). 
That is, a comparison between sampling data input by a person and a template of a personal 
identification certificate (IDC) is made by an entity which executes a personal verification 
process. The personal identification certificate authority (IDA) retrieves, fi*om a database, 
template information encrypted with a public key of a system which performs comparison and 
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transmits the retrieved template information to the system, at which input sampUng data is 
compared with the template obtained by decrypting the received IDC thereby identifying the 
person. 

Figs. 21 A to 21 C are diagrams illustrating manners of performing verification by a 
system such as a user device (such as a PC), a service provider (SP), or a personal identification 
certificate authority (IDA). Data transfer among the respective systems including the user 
device, the service provider (SP), and the personal identification certificate authority (IDA) 
shown in Figs. 21 A to 2 IC is performed, basically, only when a success is achieved in mutual 
authentication between a transmitting system and a receiving device, wherein the data is 
transmitted after being encrypted using a session key created via the authentication process. 

Fig. 21 A shows an example in which comparison for verification is performed by a user 
device. A personal identification certificate authority (IDA) stores a personal identification 
certificate (IDC) including a template encrypted using a public key of the user device, wherein 
when the user device performs verification, the user device acquires a personal identification 
certificate (IDC) of a person to be authenticated by requesting the personal identification 
certificate authority (IDA) to provide the personal identification certificate (IDC) of that person. 

The acquisition of the personal identification is performed, for example, such that the 
user device transmits to the personal identification certificate authority (IDA) the unique ID of 
the public key certificate (PKC) of the user to be authenticated or the user device, and the 
personal identification certificate authority (IDA) extracts the corresponding IDC of the person 
from the stored IDCs in accordance with the received imique ID and transmits the extracted IDC 
to the user device. Public key certificates (PKC) and personal identification certificates (IDCs) 
may be linked in various manners. IDC identification data depending upon the manner of 
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forming the link is transmitted from a user device to a personal identification certificate authority 
(IDA), and the personal identification certificate authority (IDA) retrieves a personal 
identification certificate (IDC) using the received data as a key. The maimers of linking public 
key certificates (PKC) and personal identification certificates (IDCs) will be described in fiirther 
detail later. 

The user device acquires a template by decrypting, using a private key of the user device, 
an encrypted template in a personal identification certificate (IDC) received from the personal 
identification certificate authority (IDA) and performs verification by comparing the acquired 
template v^ith personal data, for example, sampling data such as fingerprint data acquired via a 
sampling data extracting apparatus. Depending upon whether they match with each other, 
verification is concluded as OK or NG. It is required that the sampling data and the template 
stored in the IDC should be of the same type. For example, when one of them is fingerprint data, 
the other one should also be fingerprint data. When one is iris data, the other should be iris data. 
A plurality of different identification data may be stored as templates in a personal identification 
certificate (IDC), and input sampling data may be regarded as valid when the input sampling data 
matches with one of the plurality of identification data. 

Only when verification is successfiiUy passed, for example, a particular application 
program installed on the user device is allowed to be executed to perform data processing such as 
accessing to a database, updating of data, or inputting of data. If verification fails, execution of 
data processing is not allowed. In this case, the user device serving as a data processing 
apparatus having the comparison/verification capability is the entity which requests personal 
authentication and executes personal authentication. 
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In the system shown in Fig. 2 IB, comparison for verification is performed by a service 
provider (SP). A personal identification certificate authority (IDA) stores a personal 
identification certificate (IDC) including a template encrypted using a public key of the service 
provider (SP), wherein when the service provider performs verification, sampling information of 
a person to be verified and a public key certificate (PKC) of that person are transmitted to the 
service provider (SP) from a user device. In the case where the service provider (SP) already has 
the PKC, identification data identifying the PKC may be transmitted. It is desirable that 
sampling data be transmitted to the service provider (SP) after encrypting the sampling data 
using a session key created via mutual authentication or using the public key of the service 
provider (SP), so that the sampling data can be decrypted only by the service provider (SP). In 
this system, the entity which requests verification of a person is the user device, and the entity 
which executes the verification of the person is a service provider which provides a service to the 
user device. 

The service provider (SP) transmits the unique ID of a public key certificate (PKC) of a 
person or a user device to the personal identification certificate authority (IDA) to request the 
personal identification certificate authority (IDA) to provide a personal identification certificate 
(IDC) of the person to be verified. In accordance with the received unique ID, the personal 
identification certificate authority (IDA) retrieves the IDC of the person from the stored IDCs 
and transmits the retrieved IDC to the service provider (SP). Herein, the IDC includes a template 
encrypted using a public key of the service provider (SP). 

The service provider (SP) acquires the template by decrypting, using the private key of 
the service provider (SP), the encrypted template included in the personal identification 
certificate (IDC) received from the personal identification certificate authority (IDA), and the 
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service provider (SP) performs verification by comparing the template wdth data v^hich is 
obtained by decrypting encrypted sampling data such as fingerprint data v^hich is acquired via a 
sampling data extracting apparatus and transmitted fi-om the user device. Depending upon 
whether they match v^th each other, verification is concluded as OK or NG. The verification 
result (OK or NG) is transmitted to the user device, and, depending upon the verification result, 
it is determined whether or not the following process such as requesting the service provider (SP) 
to transmit a content or requesting for viewing of data should be allowed. 

In the system shovra in Fig, 21C, comparison for verification is performed by a personal 
identification certificate authority (IDA). The personal identification certificate authority (IDA) 
stores a personal identification certificate (IDC) including a template encrypted using a public 
key of the personal identification certificate authority (IDA). When the personal identification 
certificate authority (IDA) performs verification, sampling information of a person to be verified 
and a public key certificate (PKC) of that person or of a user device are transmitted to the 
personal identification certificate authority (IDA) via a service provider (SP). In the case where 
the personal identification certificate authority (IDA) already has the PKC, identification data 
identifying the PKC may be transmitted. It is desirable that the sampling data be transmitted to 
the personal identification certificate authority (IDA) after being encrypted using a public key of 
the personal identification certificate authority (IDA) so that the sampling data can be decrypted 
only by the personal identification certificate authority (IDA), In this system, the entity which 
requests verification of a person is the user device or the service provider, and the entity which 
executes the verification of the person is the personal identification certificate authority (IDA). 

The personal identification certificate authority (IDA) retrieves the IDC of the person of 
interest fi-om the stored IDCs on the basis of the unique ID of the public key certificate (PKC) 
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and acquires the template by decrypting the encrypted template included in the personal 
identification certificate (IDC) using the private key of the personal identification certificate 
authority (IDA), and furthermore, the personal identification certificate authority (IDA) performs 
verification by comparing the template v^ith data which is obtained by decrypting encrypted 
sampling data such as fingerprint data w^hich is acquired via a sampling data extracting apparatus 
and transmitted from the user device via the service provider (SP). Depending upon whether 
they match with each other, verification is concluded as OK or NG. The verification result (OK 
or NG) is transmitted to the service provider (SP) and the user device, and, depending upon the 
verification result, it is determined whether or not the following process such as requesting by 
the user device the service provider (SP) to transmit a content or requesting for viewing of data 
should be allowed. 

5.1.2 On-Line Mode Dynamic Verification 

In on-line mode dynamic verification, when sampling data input by a person is compared, 
for verification, with a template of a personal identification certificate (IDC), the personal 
identification certificate (IDC) is dynamically issued by a personal identification certificate 
authority (IDA), and comparison for verification is performed in a system, that is, by a user 
device (PC), a service provider (SP), or a personal identification certificate authority (IDA). The 
template information encrypted v^th the public key of the personal identification certificate 
authority (IDA) is decrypted by the personal identification certificate authority (IDA) and the 
IDC is transmitted, after being re-encrypted using a public key of a system at which verification 
is to be performed, to the system, at which the template is decrypted and compared v^th input 
sampling data thereby identifying a person. 
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Fig. 22 shows a system in which comparison for verification is performed by a user 
device. A personal identification certificate authority (IDA) stores a personal identification 
certificate (IDC) including a template encrypted using a public key of the personal identification 
certificate authority (IDA), wherein when the user device performs verification, the user device 
acquires a personal identification certificate (IDC) of a person to be authenticated by requesting 
the personal identification certificate authority (IDA) to provide the personal identification 
certificate (IDC) of that person. 

In the process of acquiring the personal identification certificate (IDC), a public key 
certificate (PKC) of a person to be certificated or of a user device, or the unique ID of the public 
key certificate (PKC) if the personal identification certificate authority (IDA) already has the 
public key certificate (PKC) of that user or the user device, is transmitted to the personal 
identification certificate authority (IDA) from the user device, and the personal identification 
certificate authority (IDA) retrieves the IDC of the person from the stored IDCs on the basis of 
the received unique ID or the unique ID extracted from the PKC. 

The personal identification certificate authority (IDA) decrypts the encrypted template 
extracted from the retrieved IDC using the private key of the personal identification certificate 
authority (IDA), re-encrypts the template using the public key of the user device, re-issues the 
personal identification certificate (IDC), and transmits the re-issued IDC to the user device. 

The user device acquires the template by decrypting, using the private key of the user 
device, the encrypted template included in the personal identification certificate (IDC) received 
from the personal identification certificate authority (IDA), and the user device performs 
verification by comparing the acquired template with personal data, for example, sampling data 
such as fingerprint data acquired via a sampling data extracting apparatus. Depending upon 
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whether they match with each other, verification is concluded as OK or NG. Only when 
verification is successfully passed, for example, a particular application program installed on the 
user device is allowed to be executed to perform data processing such as accessing to a database, 
updating of data, or inputting of data. If verification fails, execution of data processing is not 
allowed. 

Fig. 23 shows a system in which comparison for verification is performed by a service 
provider (SP). A personal identification- certificate authority (IDA) stores a personal 
identification certificate (IDC) including a template encrypted using a public key of the personal 
identification certificate authority (IDA). When verification is performed in the service provider 
(SP), the service provider (SP) transmits a public key certificate (PKC) of the service provider 
(SP) to the personal identification certificate authority (IDA), In the case where the personal 
identification certificate authority (IDA) already has the PKC of the service provider (SP), 
identification data identifying the PKC may be transmitted. 

Thereafter, a public key certificate (PKC) of a person to be verified or of a user device is 
transmitted from the user device to the personal identification certificate authority (IDA) via the 
service provider (SP). In the case where the personal identification certificate authority (IDA) 
already has the PKC of the user device, identification data identifying the PKC may be 
transmitted. 

The personal identification certificate authority (IDA) retrieves the IDC of the person 
from the stored IDCs on the basis of the received unique ID and decrypts the encrypted template 
included in the retrieved IDC, using the private key of the personal identification certificate 
authority (IDA), re-encrypts the template using the public key of the service provider (SP), re- 
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issues the personal identification certificate (IDC), and transmits the re-issued IDC to the service 
provider (SP). 

The service provider (SP) acquires the template by decrypting, using the private key of 
the service provider (SP), the encrypted template included in the personal identification 
certificate (IDC) received from the personal identification certificate authority (IDA), and the 
service provider (SP) performs verification by comparing the template v^th data which is 
obtained by decrypting encrypted sampling data such as fingerprint data which is acquired via a 
sampling data extracting apparatus and transmitted from the user device. Depending upon 
whether they match with each other, verification is concluded as OK or NG. The verification 
result (OK or NG) is transmitted to the user device, and, depending upon the verification result, 
it is determined whether or not the following process such as requesting a service provider (SP) 
to transmit a content or requesting for viewing of data should be allowed. 

5.2 Off-Line Mode 

In the off-line mode, verification is performed statically, unlike the on-line mode in 
which a personal identification certificate authority (IDA) dynamically issues a personal 
identification certificate (IDC) when the IDC is required in verification of sampling information. 
Therefore, personal authentication is performed in a different manner depending upon the 
encryption algorithm used to encrypt the template information included in the personal 
identification certificate (IDC) and also depending upon the location where comparison for 
verification is performed. In the off-line mode, because an encrypted template included in a 
personal identification certificate (IDC) is decrypted by a device such as a user device or a 
service provider (SP) which performs comparison for verification, it is necessary that the 
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encryption of the template be performed such that the user device or the service provider (SP) 
can decrypt the encrypted template. 

In the off-line mode, static verification is performed as described below. 

5.2. 1 Verification Performed by Device 

a. Verification is performed by a user device in which both a personal identification 
certificate (IDC) and a public key certificate (PKC) are stored. 

b. Verification is performed by a user device in which both a personal identification 
certificate (IDC) and a public key certificate (PKC) are not stored. 

5.2.2 Verification Performed by Service Provider 

c. Verification is performed by a service provider when template information 
included in a personal identification certificate (IDC) is encrypted using a public key of the 
service provider (SP). 

d. Verification is performed by a service provider when template information 
included in a personal identification certificate (IDC) is encrypted using a public key of a user 
device or a symmetric key. 

The manners of verification are described below in further detail below. 
(5.2.1) Verification Performed by Device 

a. In the case where verification is performed by a user device in which both a 
personal identification certificate (IDC) and a public key certificate (PKC) are stored. 

A user device can include both an IDC and a PKC, for example, when the user device is 
designed to execute a process of comparing sampling information with a template included in a 
personal identification certificate (IDC), provided that a personal identification certificate (IDC) 
of a user to be authenticated and a public key certificate (PKC) exist, template information 
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included in the personal identification certificate (IDC) is encrypted using a public key of the 
device described in the public key certificate (PKC), and the public key certificate (PKC) can be 
specified by the personal identification certificate (IDC). When comparison for verification is 
performed, the encryption algorithm of the template included in a personal identification 
certificate (IDC) and a public key certificate (PKC) describing a public key used as an 
encryption key are detected, and a private key corresponding to the detected public key is then 
detected and the template is decrypted using the private key. 

Fig. 24 is a diagram illustrating a verification process performed by a user device storing 
an IDC and a PKC. The user device inputs personal data, that is, sampling information such as 
fingerprint information acquired via a sampling information acquisition apparatus. The user 
device reads a personal identification certificate (IDC) stored in the user device and detects a 
public key certificate (PKC) in which the public key applied to the encryption of the template is 
stored, on the basis of the information about the template encryption algorithm. Furthermore, the 
user device detects the private key corresponding to the detected public key. The private key is 
one element of a pair of the public key and the private key of the user device, and is stored in the 
secure memory of the user device. Using this private key stored in the secure memory, the 
encrypted template of the personal identification certificate (IDC) is decrypted. Thereafter, the 
decrypted template is compared v^th the sampling information. 

Only when verification is successfiiUy passed, for example, a particular application 
program installed on the user device is allowed to be executed to perform data processing such as 
accessing to a database, updating of data, or inputting of data. If verification fails, execution of 
data processing is not allowed. 

b. In the case where an IDC and a PKC are not stored in the same device. 
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In the case where a device is used by a great number of users (that is, in the case of a 
shared user device), it is difficult to store personal identification certificates (IDCs) of all users in 
the device. In such a case, the personal identification certificate (IDC) of each user is transferred 
into the user device fi'om a personal terminal (such as an IC card or other mobile terminal), the 
process is performed on the basis of the transferred IDC. The process is performed in one of 
three manners described below. 

(b-1) IDC stored in a personal terminal is transmitted to a shared user device to perform 
verification. 

(b-2) Template information is decrypted by a personal terminal and transmitted to a 
shared user device to perform verification. 

(b-3) Verification is performed by a personal terminal. 
The processes in the respective modes are described below. 

(b-1) IDC stored in a personal terminal is transmitted to a shared user device to perform 
verification. 

Fig. 25 is a diagram illustrating a system in which verification is performed by 
transmitting a personal identification certificate (IDC) stored in a personal terminal such as an IC 
card to a shared user device. 

When a user wants to execute some data processing using an application program 
installed on the shared user device, the user inserts a mobile terminal such as an IC card into the 
shared user device. A personal identification certificate (IDC) issued by a personal identification 
certificate authority (IDA) is stored in the IC card. In this mode, the shared user device is an 
entity which executes a personal verification process. 
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After inserting the mobile personal terminal such as an IC card into the shared user 
device, the personal identification certificate (IDC) is transmitted from the mobile terminal to the 
shared user device. It is desirable that, before transmitting the IDC, mutual authentication be 
performed between the mobile terminal and the shared user device and the IDC is transmitted 
after being encrypted using a session key created in the mutual authentication process. 

Upon receiving the personal identification certificate (IDC) from the mobile terminal, the 
shared user device verifies the signature of the personal identification certificate authority (IDA) 
added to the IDC to check v^hether the IDC is tampered with. If it is determined that the IDC has 
not been tampered with (OK), the encrypted template information is extracted from the IDC. 
Note that the encryption of the template was performed using the public key of the shared user 
device or the symmetric key. In the case where the template was encrypted using the public key 
of the shared user device, the template can be decrypted using the private key of the shared user 
device. 

In the case where the template was encrypted using the symmetric key, the process 
described in blocks surrounded by a broken line in Fig. 25 is performed by the personal terminal. 
The symmetric key used to encrypt the template is encrypted using a public key of the personal 
terminal and stored in a personal identification certificate (IDC). The personal terminal extracts 
the encrypted symmetric key from the personal identification certificate (IDC) and decrypts the 
symmetric key using the private key of the personal terminal. The obtained symmetric key is 
transmitted to the shared user device. It is desirable that the symmetric key be transmitted after 
being encrypted using a session key created during the mutual authentication. Alternatively, the 
symmetric key may be transmitted after being encrypted using the public key of the user device. 
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The shared user device decrypts the encrypted template using the private key of the 
shared user device and the symmetric key, and compares the template with sampling information 
input via the sampling information acquisition apparatus. 

(b-2) In the case where template information is decrypted by a personal terminal and 
transmitted to a shared user device to perform verification. 

Fig. 26 is a diagram illustrating a system in which verification is performed by decrypting 
a personal identification certificate (IDC) stored in a personal terminal such as an IC card and 
then transmitting the decrypted IDC to a shared user device. 

After a user inserts a mobile personal terminal such as an IC card into a shared user 
device, a personal identification certificate (IDC) decrypted by the mobile terminal is transmitted 
to the shared user device. Herein, the IDC includes template information which is encrypted 
with a public key assigned to the particular mobile terminal of each user such that the encrypted 
template information can be decrypted using a private key assigned to each mobile terminal. The 
encrypted template information extracted fi-om the IDC is decrypted using the private key 
assigned to the mobile terminal and transmitted to the user device. It is desirable that, before 
transmitting the template, mutual authentication be performed between the mobile terminal and 
the shared user device and the template is transmitted after being encrypted using a session key 
created in the mutual authentication process. Ahematively, the template may be transmitted 
after being encrypted using the public key of the user device. 

Upon receiving the template from the mobile terminal, the shared user device extracts the 
template information and compares it with sampling information input via the sampling 
information acquisition apparatus. 

(b-3) Verification performed by a personal terminal. 
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Fig. 27 is a diagram illustrating a system in which verification is performed by a personal 
terminal such as an IC card using a personal identification certificate (IDC) stored in the personal 
terminal and only the result of the verification is transmitted to a shared user device. 

When a user inserts a mobile personal terminal such as an IC card into a shared user 
device, an encrypted template included in a personal identification certificate (IDC) is decrypted 
by the mobile terminal. Herein, the IDC includes template information which is encrypted with 
a public key assigned to the particular mobile terminal of each user such that the encrypted 
template information can be decrypted using a private key assigned to each mobile terminal. The 
encrypted template information extracted from the IDC is decrypted using the private key 
assigned to the mobile terminal. 

Sampling information is acquired via a sampling information acquisition apparatus and 
transmitted to the personal terminal such as an IC card via the user device. It is desirable that, 
before transmitting the sampling information, mutual authentication be performed between the 
mobile terminal and the shared user device and the sampling information is transmitted after 
being encrypted using a session key created in the mutual authentication process. Upon 
receiving the sampling information from the user device, the personal terminal compares the 
decrypted template with the sampling information and returns the comparison result to the user 
device. In this mode, the IC card employed as the mobile terminal is an entity which executes a 
personal verification process. 

(5.2.2) Verification Performed by Service Provider 

Manners in which a service provider (SP) authenticates a use to whom a service is to be 
provided are described below. 



-73" 



c. Verification performed by a service provider v^hen template information included 
in a personal identification certificate (IDC) is encrypted using a public key of the service 
provider (SP). 

First, a process performed v^hen template information of a personal identification 
certificate (IDC) is encrypted using a public key of a service provider (SP) is described below 
v^th reference to Fig. 28. 

A user device, which wants to receive a service such as content distribution or settlement 
from a service provider (SP), acquires a personal information such as a fingerprint of a user via a 
sampling information acquisition apparatus. Thereafter, mutual authentication is performed 
between the user device and the service provider (SP). If the mutual authentication is 
successfiilly completed, the user device transmits the sampling information to the service 
provider (SP). In the transmission of the sampling information, the sampling information is 
encrypted using a session key created during the mutual authentication or using a public key of 
the service provider. Furthermore, the user device transmits a personal identification certificate 
(IDC) of the user device to the service provider (SP). The personal identification certificate 
(IDC) includes template information encrypted using the public key of the service provider. 

Upon receiving the sampling information and the personal identification certificate (IDC) 
from the user device, the service provider (SP) decrypts the encrypted template information 
stored in the personal identification certificate (IDC), using the private key of the service 
provider (SP) and compares the decrypted template information with the sampling information. 

If they match v^th each other, the user is regarded as an authorized user, and the service 
provider provides a service such as content distribution or settlement to the user (user device). In 
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the case where the verification by comparison fails, the user is regarded as an unauthorized user, 
and service is not provided. 

d. Verification performed by a service provider when template information included 
in a personal identification certificate (IDC) is encrypted using a public key of a user device or a 
symmetric key. 

When template information included in a personal identification certificate (IDC) is 
encrypted using a public key of a user device or a symmetric key, user authentication may be 
performed by a service provider (SP) as described below. In this case, user authentication may 
be performed in one of the three modes described below. 

(d-1) A symmetric key used by a user device to encrypt a template is transmitted to a 
service provider (SP) and the service provider (SP) performs comparison for verification. 

(d-2) Template information is decrypted by a user device and transmitted to a service 
provider (SP) for use in verification. 

(d-3) Comparison for verification is performed by a user device. 

The processes in the respective modes are described below. 

(d-1) IDC stored in a user device is transmitted to a shared user device, and the shared 
user device performs comparison for verification. 

Fig. 29 is a diagram illustrating a system in which a personal identification certificate 
(IDC) stored in a user device is transmitted to a service provider (SP) and the service provider 
(SP) performs comparison for verification. 

When a user of a user device wants to receive a service from a service provider (SP), 
mutual authentication between the user device and the service provider (SP) is performed. If the 
mutual authentication is successfully completed, a personal identification certificate (IDC) of the 
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user is transmitted to the service provider. In the transmission of the IDC, the IDC is preferably 
encrypted using a session key created during the mutual authentication or using a public key of 
the service provider (SP). 

Upon receiving the personal identification certificate (IDC) from the user device, the 
service provider (SP) verifies a signature of a personal identification certificate authority (IDA) 
written in the IDC to check whether or not the IDC has been tampered with. If it is determined 
that the IDC has not been tampered with (OK), the service provider (SP) extracts encrypted 
template information from the IDC, wherein a symmetric key is used in encryption of the 
template. 

The symmetric key used to encrypt the template has been encrypted using the public key 
of the user device and stored in the personal identification certificate (IDC). The user device 
extracts the encrypted symmetric key from the personal identification certificate (IDC) and 
decrypts it using the private key of the user device. The obtained symmetric key is transmitted to 
the service provider (SP). It is desirable that the symmetric key be transmitted after being 
encrypted using a session key created during the mutual authentication. Alternatively, the 
symmetric key may be transmitted after being encrypted using the public key of the service 
provider (SP). 

The service provider (SP) acquires the symmetric key by performing decryption using the 
private key of the service provider (SP) or the session key, and the service provider (SP) further 
decrypts the encrypted template using the acquired symmetric key. The service provider (SP) 
then compares the obtained template with sampling information which is input via a sampling 
information acquisition apparatus and transmitted therefrom via the user device. Mutual 
authentication is performed between the user device and the service provider (SP). If the mutual 
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authentication is successfully completed, the user device transmits the sampling information to 
the service provider (SP). In the transmission of the sampling information, the sampling 
information is encrypted using a session key created during the mutual authentication or using a 
public key of the service provider. 

(d-2) Template information is decrypted by a user device and transmitted to a service 
provider (SP) for use in verification. 

Fig. 30 is a diagram illustrating a system in v^hich verification is performed by decrypting 
a personal identification certificate (IDC) stored in a user device and then transmitting the 
decrypted IDC to a service provider (SP). 

A personal identification certificate (IDC) is decrypted by a user device and transmitted 
to a service provider (SP). Herein, the IDC includes template information which is encrypted 
with a public key assigned to the particular user device such that the encrypted template 
information can be decrypted using a private key assigned to the user device. The encrypted 
template information extracted from the IDC is decrypted using the private key assigned to the 
user device, and then transmitted to the service provider (SP). It is desirable that, before 
transmitting the template, mutual authentication be performed between the user device and the 
service provider (SP) and the template is transmitted after being encrypted using a session key 
created in the mutual authentication process. Alternatively, the template may be transmitted 
after being encrypted using a public key of the service provider (SP). 

Upon receiving the template from the user device, the service provider (SP) extracts the 
template information and compares it with sampling information which is input via a sampling 
information acquisition apparatus and transmitted from the user device. 

(d-3) Comparison for verification is performed by a user device. 
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Fig. 31 is a diagram illustrating a system in which verification is performed by a user 
device using a personal identification certificate (IDC) stored in the user device and only the 
result of the verification is transmitted to a service provider (SP). 

The user device decrypts the encrypted template included in the personal identification 
certificate (IDC). Herein, the IDC includes template information which is encrypted with a 
public key assigned to the particular user device such that the encrypted template information 
can be decrypted using a private key assigned to the user device. The encrypted template 
information extracted firom the IDC is decrypted using the private key assigned to the user 
device. 

Sampling information is acquired via a sampling information acquisition apparatus and 
input to the user device. The user device performs verification by comparing the decrypted 
template with the sampling information and transmits the verification result to the service 
provider (SP). In accordance with the resuh, the service provider (SP) determines whether or not 
a service should be provided. 

6. Control of Permission of Usage of Content According to User Authentication on 
the Basis of Person Identification Certificate 

A process of controlling permission of usage of various contents such as music data or 
image data and various programs such as a game in accordance with user authentication on the 
basis of a personal identification certificate (IDC) is described below. 

Fig. 32 illustrates a configuration of a secure container containing a content to be 
distributed via content transaction. The secure container shown in Fig. 32 may be used to 
distribute a content fi:om a service provider to a user device and also may be used to distribute a 
content from a user device to another user device. 
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A secure container can be distributed not only from a service provider to users but also 
among users. When a content is distributed among users, the distribution may be performed in 
either one of the two manners described belov^. In a first manner, a content is transmitted for 
sales in series from one user to another, for example, from a user A to a user B and then from the 
user B to a user C, and so on. The series distribution of contents among users is referred to as 
"intergeneration distribution". In a second manner, a content purchased by a user A is 
distributed in parallel from the user A to a users B, C, D, etc. That is, the same content is 
distributed from one user to a plurality of users. This parallel content distribution is referred to 
as "secondary distribution". 

As shovm in Fig. 32, a secure container 700 includes a content 701 encrypted using a 
content key, price information 702 including information about the price of the content, sales 
condition information (UCP) 703 indicating the restriction on the usage of the content, and a 
digital signature 704 of a producer of the secure container, such as a service provider, w^herein 
the sales condition information (UCP) 703 indicates, for example, that the content is permitted to 
be used only once and reselling among users via "intergeneration distribution" or "secondary 
distribution" is not permitted, or that the content is permitted to be resold among users a plurality 
of times. In the case v^here the content is permitted to be resold among users a plurality of times, 
the sales condition information (UCP) 703 may indicate the details of the condition on the 
reselling. For example, the sales condition information (UCP) 703 indicates that 
"intergeneration distribution" is allowed up to two times or that "secondary distribution" is 
allowed up to three times. The price information 702 and the sales condition information (UCP) 
703 of the secure container are generically referred to as container information. At least either 
one of or both of the price information 702 and the sales condition information (UCP) 703 of the 
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container information of the secure container include a list of personal identification certificates 
(IDCs) of users who are authorized to use the content. 

Fig. 33 is a diagram illustrating a form of a list of personal identification certificates 
(IDCs). The list of personal identification certificates (IDCs) includes user IDs or user 
identifiers and identifiers of the personal identification certificates (IDCs) of the respective users. 

The container information including the price information 702 and the sales condition 
information (UCP) 703 is management information which is set by one of a content producer, a 
content provider, and a service provider. For example, a service provider produces data such that 
a list of personal identification certificates (IDCs) of registered users is included in the price 
information 702 or the sales condition information 703. The digital signature is written by an 
agency or an organization which manages the distribution of contents. In the case where the 
distribution of contents is managed by a service provider, the digital signature is written by the 
service provider. 

Fig. 34 illustrates a specific example of a form of sales condition information (UCP) 703, 
As shown in Fig. 34, the sales condition information (UCP) includes a personal identification 
certificate (IDC) list 71 1 which is data indicating of a list of identifiers of personal identification 
certificates (IDCs) of users who are permitted to use a content. The sales condition information 
(UCP) fiirther includes a content identifier (ID), usable device conditions indicating user devices 
on which the content can be used, an area code indicating an area where the content can be used, 
and the type of permitted usage indicating the manners in which the content is permitted to be 
used (for example, the maximum number of times the content is allowed to be reproduced, the 
maximum number of time the content is allowed to be copied (downloaded)). 
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The type of permitted usage is data indicating the manners in which the content is 
permitted to be used. Fig. 35 illustrates an example of a format of the permitted usage data. 
Rule numbers are assigned to respective items of the permitted usage, such as whether 
reproduction is permitted, whether copying is permitted, how long the copy is allowed to be 
reproduced or copied, and how many times the copy is allowed to be reproduced or copied. In 
Fig. 35, SCMS is copy restriction information which indicates the maximum number of times the 
content is allowed to be copied. A user is permitted to reproduce and copy the content within the 
restriction defined in the sales restriction information of the secure container, wherein the 
respective items of the restriction are denoted by the rule numbers. 

As shown in Fig. 34, the sales condition information (UCP) also includes "UCP 
generation management information" 712 indicating the maximum number of times the content 
is permitted to be distributed among user devices via "intergeneration distribution", and 
"maximum allowable mmiber of secondary distributions" 713 indicating the maximum number 
of times the content is permitted to be distributed via "secondary distribution". The maximum 
number of times the content is permitted to be distributed among users defined in "UCP 
generation management information" is inherited into the usage control status (UCS) information 
(Fig. 38) stored in a user device depending upon the usage of the secure container. In 
accordance with the maximum number of times the content is permitted to be distributed among 
users defined in "UCP generation management information", "UCS generation management 
information" and "UCS allowable number of secondary distributions" are described in the usage 
control status (UCS) information. The "UCS generation management information" is updated 
each time intergeneration distribution of the content is performed and the "UCS allowable 
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number of secondary distributions" is updated each time secondary distribution of the content is 
performed. The usage control status (UCS) information will be described in further detail later. 

Fig. 36 is a diagram illustrating an example of a data format of price information included 
in a secure container. The price information includes information indicating the content ID as in 
the sales restriction information (UCP) shown in Fig. 34. In addition, the price information 
includes information indicating a price information ID and information indicating a price 
information version. Furthermore, as in the sales restriction information (UCP) shown in Fig. 
34, the price information includes a personal identification certificate (IDC) list 721. That is, 
data indicating the list of identifiers of personal identification certificates (IDCs) of users who 
are permitted to use the content is included in the sales restriction information (UCP). 

Fig. 37 is a diagram illustrating a manner of distributing a content using a secure 
container. A content provider (CP) 801 generates or acquires a content which is to be stored in a 
secure container, and the content provider (CP) 801 provides the generated or acquired content 
together with sales condition information (UCP) data of the content to a service provider (SP) 
802 which distributes the content to users. The service provider (SP) 802 generates price 
information of the content and stores a list of personal identification certificates (IDC) of users 
who are permitted to use the content into at least one of or both of the price information and the 
sales condition information (UCP). The service provider (SP) 802 further writes a digital 
signature thereby forming a secure container and transmits the resultant secure container to a 
user device 803. 

The user device 803 verifies the signature of the secure container. Furthermore, the user 
device 803 verifies other information such as the sales restriction (UCP) data and the price 
information included in the secure container to check that the data has not been tampered with. 
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The user device 803 then extracts the IDC identifier of the user device 803 from the personal 
identification certificate (IDC) Ust from either the sales restriction (UCP) data or the price 
information, and acquires the personal identification certificate (IDC) indicated by the IDC 
identifier. The user device 803 then compares the template included in the IDC with sampling 
information. The comparison for verification is performed by one of the user device, the service 
provider, and the personal identification certificate authority (IDA). In the case where the 
personal verification has been successfiiUy passed, it becomes possible for the user to use the 
content, that is, decrypt the content. More specifically, provided that the verification has been 
passed, the content key used to encrypt the content is transmitted from the service provider to the 
user device. This makes it possible for the user device to reproduce and copy the content 
included in the secure container using the content key. 

The user device stores the secure container onto a storage medium of the user device 803. 
The user device 803 then generates charge information indicating the charge for use of the 
content and transmits it to a clearing center 804 which performs settlement. The charge 
information is generated on the basis of the data described in the price information described 
earlier. The clearing center transfers the charge from, for example, an electronic money account 
from the user in accordance with the charge information. The user device 803 is allowed to 
distribute the secure container to another user device 805, as will be described in detail later. 
When storing the secure container, the user devices 803 and 805 generate usage control status 
(UCS) information and store it into a memory. 

Fig. 38 illustrates an example of usage control status (UCS) information which is 
generated by a user device and stored in a memory of a user device, when the secure container is 
stored. As shown in Fig. 38, the usage control status (UCS) information includes, in addition to 
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the data indicating the content ID and the service provider ID, information indicating the content 
usage restriction such as the number of times the content is allowed to be further reproduced or 
the number of times the content is allowed to be further copied. Note that the number of times 
the content is allowed to be further reproduced or copied indicates the number of times the 
content is allowed to be further reproduced or copied using the same user device. The usage 
control status (UCS) information is generated, updated, and inherited in accordance v^th the 
permitted usage data which is included in the sales condition information (UCP) data of the 
content and which defines the permitted usage of the content. Thus, a user device uses the 
content in accordance with the content usage restriction data included in the content sales 
condition information (UCP) data indicating the content usage restriction or in accordance with 
the usage control status information generated in accordance with the usage restriction data. 

The usage control status (UCS) information further includes a personal identification 
certificate (IDC) list 73 1 . That is, data indicating the list of identifiers of personal identification 
certificates (IDCs) of users who are permitted to use the content is included in the usage control 
status (UCS) information. This list is generated by inheriting the data described in the sales 
condition information (UCP). The usage control status (UCS) information further includes 
"UCS generation management information" 732 and "UCS allowable number of secondary 
distributions" 733. 

As described earlier, the "UCS generation management information" indicates the 
number of times intergeneration distribution of the content is allowed to be performed. For a 
user device which first purchases a content, the same number as the number defined in the "UCP 
generation management information" is set in the UCS generation management information. For 
a user device which receives the content fi-om a user via the intergeneration distribution, the 
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number equal to the value obtained by subtracting the number of times intergeneration 
distribution has been performed from the nimiber defined in the "UCP generation management 
information" is set in the UCS generation management information. 

"UCS allowable number of secondary distributions" 733 is a field in which the nimiber of 
times secondary distribution of the content is allowed. For a user device which first purchases 
the content, the same number as the number defined in the "UCS allowable number of secondary 
distributions" in the sales condition information (UCP) is set, and is updated, that is, 
decremented, each time secondary distribution is performed thereafter. 

As described above, distribution of the content among users is allowed or forbidden 
depending upon the "UCS generation management information" or "UCS allowable number of 
secondary distributions" in the usage control status (UCS) information stored in the memory of 
the user device together with the content. The "UCS generation management information" is 
updated each time intergeneration distribution of the content is performed, and the "UCS 
allowable number of secondary distributions" is updated each time secondary distribution of the 
content is performed. 

Fig. 39 is a diagram illustrating a manner of using a personal identification certificate 
(IDC) when a secure container containing a content is distributed from a service provider to a 
user device. 

First, a user 820 of a user device 810 requests a personal identification certificate 
authority (IDA) 830 to issue a personal identification certificate (IDC) of the user 820. When the 
user 820 issues the request, the user 820 presents his/her biometric information and other 
personal information to the personal identification certificate authority (IDA) 830. After 
verifying the authenticity of the user, the personal identification certificate authority (IDA) 830 
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generates template information in accordance with sampling information and further generates a 
personal identification certificate (IDC) in which encrypted template information is stored. 

In response to a request, the generated personal identification certificate (IDC) is 
distributed to the user device 810 or a service provider 840 and stored therein. For example, 
when the user 820 wants to receive a content from the service provider 840, the service provider 
840 authenticates the user 820 on the basis of the personal identification certificate (IDC) stored 
in the service provider 840. That is, the service provider 840 compares the sampling information 
received from the user with the template information included in the personal identification 
certificate (IDC), and, if they match with each other, the service provider 840 regards the user 
who provided the sampling information as an authorized user corresponding to the personal 
identification certificate (IDC) and distributes the content to the user. 

When the user 820 wants to use the user device 810, authentication is also performed on 
the basis of the personal identification certificate (IDC) stored in the user device 810. That is, 
sampling information input by the user is compared with the template information included in 
the personal identification certificate (IDC), and, if they match with each other, the user device 
810 determines that the user who provides the sampling information is an authorized user 
corresponding to the personal identification certificate (IDC) and permits the user to use the user 
device for data processing. 

As described above, user authentication may be performed individually using a personal 
identification certificate (IDC) by a user device or a service provider at various locations. Note 
that, as described earlier, the template stored in the personal identification certificate (IDC) is 
encrypted using a public key of a system which performs comparison for verification. 
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Fig. 40 is a flow chart of a process in which a secure container is received from a service 
provider and a personal authentication is performed by a user device so that the content can be 
used only by authorized users. The respective steps in the flow are described below. 

In step S701, mutual authentication is performed between a service provider and a user 
device. Only when the mutual authentication is successfully completed (Yes in S702), the 
service provider extracts a secure container (S703) and transmits the extracted secure container 
to the user device (S704). In the mutual authentication, a session key is created, and used, as 
required, to encrypt data which is transferred between the service provider and the user device. 

The user device verifies the received secure container (S705). Herein, the verification 
includes the verification of the signature of the secure container itself and the signatures of the 
respective data such as the price information and the sales condition information (UCP) 
described in the container. 

If the verification of the container is successfully passed (Yes in S706), a user inputs 
sampling information and a user ID to the user device (S707). The user device extracts a 
personal identification (IDC) list from the price information or the sales condition information 
(USP) of the secure container (S708) and retrieves an IDC identifier corresponding to the user ID 
(S709). In the case where an IDC identifier corresponding to the input user ID is not found, it is 
determined that the user is not a user authorized by the service provider and an error is returned 
(No in S710). In this case, the following process is not performed. 

If an IDC identifier corresponding to the input user ID is found in the personal 
identification certificate (IDC) list (Yes in S710), a personal identification certificate (IDC) is 
acquired on the basis of the IDC identifier (S711). More specifically, in the case where the 
personal identification certificate (IDC) is stored in the user device, the IDC stored in the user 



-87- 



device is employed, while the personal identification certificate (IDC) is received from the 
personal identification certificate authority (IDA) or the service provider if the personal 
identification certificate (IDC) is not stored in the user device. A template is extracted from the 
acquired personal identification certificate (IDC) and decrypted using the private key of the user 
device. The template is then compared v^ith the sampling information for verification (S712). If 
the verification fails (No in 8713), an error is returned and the following process is not 
performed. More specifically, the decryption of the content is not performed and thus the usage 
of the content is limited. In the case where the verification is affirmative (Yes in S713), the 
service provider is informed of the success of the verification, and the service provider transmits 
to the user device a content key to be used in decryption of an encrypted content stored in the 
secure container (S714). The user device decrypts the encrypted content using the content key 
received from the service provider and uses the content (S715). 

In this system, as described above, a content stored in a secure container is allowed to be 
used only when a user is verified as an authorized user via a user verification process using a 
template of a personal identification certificate (IDC), thereby preventing the content from being 
used by an unauthorized user. 

Fig. 41 is a flow chart of a process in which a personal authentication is performed by a 
service provider and a secure container is distributed only to authorized users. The respective 
steps in the flow are described below. 

In step S721, mutual authentication is performed between a service provider and a user 
device. In the mutual authentication, a session key is created, and used, as required, to encrypt 
data which is transferred between the service provider and the user device. 
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Only when the mutual authentication is successfully completed (Yes in S722), the service 
provider extracts a secure container (S723)5 and a user inputs sampling information and a user ID 
to the user device (S735) and transmits them to the service provider (S736). 

The service provider extracts a personal identification (IDC) list from the price 
information or the sales restriction information (UCP) of the secure container (S724) and 
retrieves an IDC identifier corresponding to the user ID (S725). In the case where an IDC 
identifier corresponding to the input user ID is not found, it is determined that the user is not a 
user authorized by the service provider and an error is returned (No in S726). In this case, the 
following process is not performed. 

If an IDC identifier corresponding to the input user ID is found in the personal 
identification certificate (IDC) list (Yes in S726), a personal identification certificate (IDC) is 
acquired on the basis of the IDC identifier (S727). More specifically, in the case where the 
personal identification certificate (IDC) is stored in the service provider, the IDC stored in the 
service provider is employed, while the personal identification certificate (IDC) is received fi-om 
the personal identification certificate authority (IDA) if the IDC is not stored in the service 
provider. A template is extracted fi-om the acquired personal identification certificate (IDC) and 
decrypted using the private key of the service provider. The template is then compared with the 
sampling information for verification (S728). If the verification fails (No in S729), an error is 
returned and the following process is not performed. More specifically, distribution of the secure 
container is not performed. In the case where the verification is affirmative (Yes in S729), the 
user is regarded as an authorized user and the following process is performed. More specifically, 
the service provider distributes the secure container and the content key to the user device 
(S730). 
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The service provider transmits a secure container to the user device, and the user device 
verifies the received secure container (S731). Herein, the verification includes the verification of 
the signature of the secure container itself and the signatures of the respective data such as the 
price information and the sales condition information (UCP) described in the container. If the 
verification of the container is successfully completed (Yes in S732), it becomes possible to use, 
on the user device, the content in the secure container. 

In this system, as described above, a content is allowed to be distributed only when a user 
is verified as an authorized user via a user verification process using a template of a personal 
identification certificate (IDC), thereby preventing the content from being distributed to an 
unauthorized user. 

Manner of using a personal identification certificate (IDC) in distribution of a secure 
container among user devices are described below. 

Fig. 42 is a diagram illustrating a manner of distributing a content between users using a 
secure container. A service provider (SP) generates price information of the content and stores a 
list of personal identification certificates (IDC) of users who are permitted to use a content into at 
least one of or both of price information and sales condition information (UCP). The service 
provider (SP) further writes a digital signature thereby forming a secure container and transmits 
the resultant secure container to a user device 1 (920). 

If users 940 and 945 who want to use the user device 1 (920) are authorized users 
permitted to use the content, the personal identification certificate (IDC) identifiers of the user 
are described in a list of personal identification certificates (IDCs) stored in price information or 
sales condition information (UCP) of a secure container corresponding to the content or stored in 
usage control status (UCS) information which is generated by the user device and stored in the 
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user device when the secure container is stored in the user device. When a user wants to use the 
content stored in the user device 1 (920), authentication of the user is performed on the basis of 
the personal identification certificate (IDC) Ust in the secure container. That is, the user who 
wants to use the content is requested to input sampling information. The user device 1 (920) 
compares the input sampling information with the template included in the stored personal 
identification certificate (IDC). Only when they match with each other, the user device 1 (920) 
permits the user to use the content. 

As described earlier, the secure container may also be distributed among user devices. In 
the case where the secure container has been moved from the user device 1 (920) to a user device 
2 (930), when users 940 and 945 use the content on the user device 2 (930), user authentication is 
performed on the basis of the personal identification certificate (IDC) list described in the price 
information or sales condition information (UCP) of the secure container or in the usage control 
status (UCS) information. That is, a user who wants to use the content is requested to input 
sampling information. The user device 2 (930) compares the input sampling information with 
the template included in the stored personal identification certificate (IDC). Only when they 
match with each other, the user device 2 (930) permits the user to use the content. 

As described above, when the secure container is moved, the personal identification 
certificate (IDC) list which was originally stored in the price information or sales condition 
information (UCP) of the secure container is maintained unchanged, and the IDC list in the usage 
control status (UCS) information generated in accordance with the sales condition information 
(UCP) of the secure container is also maintained unchanged, thereby ensuring that the usage of 
the content is limited to only authorized users in accordance with the personal identification 
certificate (IDC) list. 
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Fig. 43 illustrates another manner in which a content is distributed using a secure 
container among users and a manner in which user authentication is performed. In the process 
shown in Fig. 43, usage of a user device, that is, access to the user device, is restricted in 
accordance with user authentication on the basis of a personal identification certificate (IDC) 
stored in the user device, and, furthermore, use of a content is restricted in accordance with user 
authentication on the basis of price information, sales condition information (UCP), or an 
personal identification certificate (IDC) list described in usage control status (UCS) information. 
That is, user authentication is performed for two different purposes. 

Before staring to use a user device 1 (950), a user A and a user B present sampling 
information to a personal identification certificate authority (IDA) 970 and request the personal 
identification certificate authority (IDA) 970 to issue personal identification certificates (IDCs) 
in which template information is stored in accordance with the sampling information. The issued 
personal identification certificates (IDCs) are stored in the user device 1 (950). 

When a user issues a request for usage of the user device 950, the user device 950 
performs user authentication on the basis of the personal identification certificate (IDC) 955 
stored in the user device 950. That is, the user who wants to use the content is requested to input 
sampling information. The user device 950 compares the input sampling information with the 
template included in the stored personal identification certificate (IDC). Only when they match 
with each other, the user is permitted to use the user device 1 (950). 

When a user issues a request for usage of a content stored in a secure container 990, user 
authentication is performed on the basis of the personal identification certificate (IDC) list 
described in the price information or sales condition information (UCP) of the secure container 
or described in the usage control status (UCS) information. When the user is not found in the 



"92- 



personal identification certificate (IDC) list or when, even if the user is found in the personal 
identification certificate (IDC) list, the input sampling information does not match with the 
template information, the user is not permitted to use the content. 

That is, a user can use the content of the secure container 990 on the user device 1 (950) 
only when the user authentication on the basis of the personal identification certificate (IDC) 
stored in the user device 1 (950) is passed and furthermore when the user authentication on the 
basis of the IDC list described in the price information or the sales restriction (UCP) information 
of the secure container or described in the usage control status (UCS) information is passed. 

The secure container is allowed to be moved among devices. In the case where the 
secure container has been moved to a user device 2 (960), user authentication on the basis of 
personal identification certificate (IDC) stored in the user device 2 (960) and user authentication 
on the basis of the personal identification certificate (IDC) list described in the price information 
or the sales condition information (UCP) of the secure container or described in the usage control 
status (UCS) information are performed in a similar manner. 

In the system shown in Fig. 43, personal identification certificates (IDCs) 955 of users A 
and B are stored in the user device 1 (950) and a list 992 of users A, B, and C are stored in the 
secure container (990). Therefore, only users A and B are allowed to use the content using the 
user device 1 (950). On the other hand, personal identification certificates (IDCs) 965 of users A 
and C are stored in the user device 2 (960) and a list 992 of users A, B, and C is stored in the 
secure container (990). Therefore, only users A and C are allowed to use the content using the 
user device 2 (960). 

In the example shown in Fig. 43, the system is constructed on the assumption that each 
user device performs user authentication by comparing sampling information with a template of 
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an IDC which is stored in the user device. When it is desirable that the device can be used by 
any user whose personal identification certificate (IDC) has been registered in a personal 
identification certificate authority (IDA), user authentication may be performed by comparing 
input sampling information with templates not only in IDCs stored in the device but also in 
personal identification certificates (IDCs) stored in the personal identification certificate 
authority (IDA), and users who have passed the user authentication may be allowed to use the 
device. 

An example of a process of performing user authentication on the basis of a personal 
identification certificate (IDC) in an IDC list described in a secure container before distributing 
the secure container among user devices thereby restricting the usage of the content is described 
below with reference to the flow charts shown in Figs. 44 and 45. Note that it is assumed herein 
that accessing to user devices is not limited. 

Fig. 44 is a flow chart of a process in which a secure container is received from a user 
device A and personal authentication is performed by a user device B so that only authorized 
users can use the content. The respective steps in the flow are described below. 

In step S751, mutual authentication is performed between a user device A and a user 
device B. Only when the mutual authentication is successfully completed (Yes in S752), the 
user device A extracts a secure container (S753) and transmits the extracted secure container to 
the user device B (S754). In the mutual authentication, a session key is created, and used, as 
required, to encrypt data which is transferred between the service provider and the user device. 

The user device B verifies the received secure container (S755). Herein, the verification 
includes the verification of the signature of the secure container itself and the signatures of the 
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respective data such as the price information and the sales restriction (UCP) information 
described in the container. 

If the verification of the container is affirmative (Yes in S756), a user who wants to use a 
content inputs sampling information and a user ID to the user device B (S757). The user device 
B extracts a personal identification certificate (IDC) from the usage control status (UCS, A) 
information and retrieves an IDC identifier corresponding to the user ID (S759). In the case 
where an IDC identifier corresponding to the input user ID is not found, it is determined that the 
user is not a user authorized by the service provider and an error is returned (No in S760). In this 
case, the following process is not performed. 

If an IDC identifier corresponding to the input user ID is found in the personal 
identification certificate (IDC) list (Yes in S760), a personal identification certificate (IDC) is 
acquired on the basis of the IDC identifier (S761). More specifically, in the case where the 
personal identification certificate (IDC) is stored in the user device B, the IDC stored in the user 
device B is employed, while the personal identification certificate (IDC) is received from the 
personal identification certificate authority (IDA) or the service provider if the IDC is not stored 
in the user device B. A template is extracted from the acquired personal identification certificate 
(IDC) and decrypted using the private key of the user device B. The template is then compared 
with the sampling information for verification (S762). If the verification fails (No in S763), an 
error is returned and the following process is not performed. More specifically, the decryption of 
the content is not performed and thus the usage of the content is limited. In the case where the 
verification is affirmative (Yes in S763), the user device A is informed of the success of the 
verification, and the user device A transmits to the user device B a content key to be used in 
decryption of an encrypted content stored in the secure container (S764). The user device B 
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decrypts the encrypted content using the content key received from the user device A and uses 
the content (S765). 

In this system, as described above, a content stored in a secure container is allov^ed to be 
used only when a user is verified as an authorized .user via a user verification process using a 
template of a personal identification certificate (IDC), thereby preventing the content from being 
used by an unauthorized user even after a secure container has been distributed among user 
devices. 

Fig. 45 is a flov^ chart of a process in v^hich personal authentication is performed by a 
content distributor before distributing a content and a secure container is distributed only to 
authorized users. The respective steps in the flov^ are described below. 

In step S771, mutual authentication is performed between a user device A and a user 
device B. In the mutual authentication, a session key is created, and used, as required, to encrypt 
data which is transferred between the service provider and the user device. 

Only when the mutual authentication is successfully completed (Yes in S772), the user 
device A extracts a secure container (S773), and a user inputs sampling information and a user 
ID to the user device B (S785) and transmits them to the user device A (S786). 

The user device A extracts a personal identification (IDC) list ft-om the price information, 
the sales restriction (UCP) information, or the usage control status (UCS) information of the 
secure container (S774) and retrieves an IDC identifier corresponding to the user ID (S775). In 
the case where an IDC identifier corresponding to the input user ID is not found, it is determined 
that the user is not a user authorized by the service provider and an error is returned (No in 
S776). In this case, the following process is not performed. 
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If an IDC identifier corresponding to the input user ID is found in the personal 
identification certificate (IDC) list (Yes in S776), a personal identification certificate (IDC) is 
acquired on the basis of the IDC identifier (S777). More specifically, in the case where the 
personal identification certificate (IDC) is stored in the service provider, the IDC stored in the 
service provider is employed, while the personal identification certificate (IDC) is received from 
the personal identification certificate authority (IDA) if the IDC is not stored in the service 
provider. A template is extracted from the acquired personal identification certificate (IDC) and 
decrypted using the private key of the service provider. The template is then compared with the 
sampling information for verification (S778). If the verification fails (No in S779), an error is 
returned and the following process is not performed. More specifically, distribution of a secure 
container and a content key is not performed. In the case where the verification is affirmative 
(Yes in S779), the user is regarded as an authorized user and the following process is performed. 
More specifically, distribution of a secure container and a content key to the user device B is 
performed. 

If the user device B receives a secure container from the user device A, the user device B 
verifies the received secure container (S781). Herein, the verification includes the verification of 
the signature of the secure container itself and the signatures of the respective data such as the 
price information and the sales restriction (UCP) information described in the container. If the 
verification of the container is successfully completed (Yes in S782), it becomes possible to use, 
on the user device B, the content in the secure container. 

In this system, as described above, a content is allowed to be distributed only when a user 
is verified as an authorized user via a user verification process performed by the user device A 
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using a template of a personal identification certificate (IDC), thereby preventing the content 
from being distributed to an imauthorized user. 

Fig. 46 is a block diagram mainly illustrating configurations of user devices which 
transmit a secure container to each other. A process of transferring a secure container, 
generating content usage control status (UCS) information, and storing the secure container is 
described with reference to Fig. 46. 

A service provider 1810 shown in Fig. 46 performs a first distribution (primary 
distribution) of a secure container. The service provider 1810 stores the content in a contents 
database 1812 and also stores user information in a user information database 1813 (IDC). In the 
service provider 1810, under the control of a controller 1811, an encryption unit 1814 performs 
mutual authentication with a device to which a secure container is to be transferred and also 
writes a signature on data to be transferred. The encryption unit 1814 includes a memory for 
storing key information needed in the encryption process, the above-described public key of the 
public key certificate authority (CA), and the public key certificate issued by the public key 
certificate authority (CA). The user information database 1813 stores personal identification 
certificates (IDCs) of users to whom services are provided. A user identifying apparatus 1816 
performs user authentication, as required, by comparing sampling information with information 
described in an IDC. 

The service provider 1810 transfers a secure container to a user device A 1820 via a 
communication unit 1815. As described earlier, the secure container includes sales restriction 
(UCP) information and price information wherein a personal identification certificate (IDC) list 
is described in at least either the sales restriction (UCP) information or the price information. 
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A clearing center (CS) 1840 shown in Fig. 46 settles the charges for use of distributed 
contents (by processing electronic money data, for example). The clearing center 1840 includes 
an encryption unit 1844 which executes mutual authentication with respective devices in 
reception/transmission of logs and which adds a signature to data to be transmitted and verifies a 
signature of received data. The clearing center 1840 also includes a database 1842 in which 
various data such as user management data and user account management data are stored. The 
encryption unit 1 844 includes a memory for storing key information necessary in the encryption 
process, the public key of the public key certificate authority (CA), and the public key certificate 
issued by the public key certificate authority (CA). A controller 1841 controls the operations 
such as transmission/reception of data and transfer of data performed by the encryption unit 
during the encryption process. The database 1842 includes personal identification certificates 
(IDC) of users to whom services are provided. A user identifying apparatus 1846 authenticates a 
user, as required, by comparing sampling information with information described in the IDCs. 

The service provider 1810 transfers a secure container to a user device A 1820 via a 
communication unit 1815. When the user device A 1820 receives the secure container via a 
communication unit 1827, the user device A 1820 performs a purchasing process. In the 
purchasing process, user authentication is performed on the basis of the personal identification 
certificate (IDC) stored in a storage unit 1825. In the case where the personal identification 
certificate (IDC) is not stored in the storage imit 1825, user authentication may be performed by 
the service provider 1810. In the user device A 1820, under the control of a controller 1821, an 
encryption unit 1822 generates a content usage control status' (UCS) information in accordance 
with the sales restriction (UCP) information of the secure container and stores it in a memory 
such as a flash memory 1824. As described earlier, the content usage control status (UCS) 
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information includes a list inherited from the personal identification certificate (IDC) list stored 
in the sales restriction (UCP) information. 

The user device A 1820 performs a content usage charge payment process using, for 
example, electronic money 1828. The encryption unit 1822 generates a usage log and transmits 
it to the service provider 1810 via the communication unit 1827. The secure container received 
by the user device A 1820 is stored in a storage unit 1825 such as a hard disk. The service 
provider 1810 verifies the usage log transmitted from the user device A 1820. After completion 
of the verification, service provider 1810 encrypts a content key using a session key and 
transmits the encrypted content key to the user device A 1820. The user device A 1820 decrypts 
the encrypted content key using the session key, encrypts the content key using a unique storage 
key of the user device Al 820, and stores it in the memory 1 824. 

In usage of a content, such as reproduction of a content using a data reproducing unit 
1826, the user device A 1820 decrypts the content key stored in the memory 1824 using the 
storage key, decrypts the content in the secure container stored in the storage unit 1825 using the 
decrypted content key, and reproduces the content via the data reproducing unit 1 826. In order 
to perform the above-described decryption of the content in the secure container, it is required 
that, in the previous decision step, the number of times the content is permitted to be further 
reproduced indicated by the content usage restriction (UCS) information stored in the memory 
1824 be read and the number should indicate that fiirther reproduction is permitted. 

When a secure container is transmitted from the user device A 1820 to the user device B 
1830, the user device A1820 reads the content usage control status (UCS) information from the 
memory 1824, decrypts it using the storage key via the decryption unit 1822 (decryption is 
unnecessary if the UCS information is not encrypted), and detects the "UCS generation 
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management information" and "UCS allowable number of secondary distributions" described in 
the UCS. If it is determined that further distribution is permitted, the user device A1820 
transfers the secure container to the user device B1830 via the communication unit 1827. The 
user device B1830 receives the secure container via the communication unit 1837 and performs a 
purchasing process. 

When the secure container is transmitted, the user authentication described earlier is 
performed. The user authentication is performed by the person identifying apparatus 1 829 of the 
user device A which transmits the secure container as described earlier with reference to the flow 
chart shown in Fig. 45, or by person identifying apparatus 1839 of the user device B which 
receives the secure container as described earlier with reference to the flow chart shown in Fig. 
44. Alternatively, the user authentication may be performed by the service provider or the 
personal identification certificate authority (IDA). 

If the person authentication is passed, the user device B1830 generates a content usage 
control status (UCS-B) information in which "UCS generation management information" and 
"UCS allowable number of secondary distributions" are newly set, using the encryption unit 
1832 under the control of the controller 1831, in accordance with the sales restriction (UCP) 
information of the secure container and in accordance with the UCS information of the user 
device A 1820. The resultant content usage control status (UCS-B) is stored in the memory 1834 
such as a flash memory. ^ 

In the generated UCS-B, the content usage history of the user device A 1820 is inherited. 
The "UCS generation management information" of the UCS-B is set to be smaller by one than 
the "UCS generation management information" of the UCS-A. The "UCS allowable number of 
secondary distribution" of the UCS-B is set to be smaller by one than the "UCS allowable 
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number of secondary distribution" of the UCS-A, or newly set to be equal to the "UCP allowable 
number of secondary distributions" described in the secure container. 

The user device B1830 performs a content usage charge payment process using the 
electronic money 1838. That is, a usage log is generated by the encryption unit 1832 and 
transmitted to the user device A1820 via the commimication unit 1837. The secure container 
received by the user device B1830 is stored in a storage unit 1835 such as a hard disk. The user 
device A1820 verifies the usage log transmitted from the user device B1830. If the verification 
is passed, the user device A 1820 reads the content key from the memory 1824, decrypts the 
content key using the storage key, decrypts the content key using the session key, and transmits it 
to the user device B1830. The user device B1830 decrypts the encrypted content key using the 
session key, encrypts the content key using an unique storage key of the user device B1830, and 
stores it in the memory 1 834. 

If the content is used beyond the upper limit by means of illegal tampering, the number of 
reception logs generated in accordance with the same secure container exceeds the number set in 
the "UCS generation management information" in the sales restriction (UCP) information in the 
secure container. As a result, when the data is transmitted to the clearing center 1840, the data is 
determined to be invalid. The reception log includes, as well as information indicating the 
content ID, "UCP generation management information" described in the secure container. Thus, 
in the settlement performed by the clearing center 1840, if the reception log indicates that the 
number of distributions exceeds the number set in the "UCP generation management 
information", the reception log is determined to be invalid. In the case where a reception log is 
generated on the basis of a content which is not permitted distributed among users, the reception 
log is regarded as invalid. 
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In usage of a content, such as reproduction of a content using a data reproducing unit 
1836, the user device B1830 decrypts the content key stored in the memory 1834 using the 
storage key, decrypts the content in the secure container stored in the storage unit 1835 using the 
decrypted content key, and reproduces the content via the data reproducing unit 1836. In the 
above-described decryption of the content in the secure container, the usage status such as the 
number of times the content is permitted to be further reproduced, described in the content usage 
control status (UCS) information stored in the memory 1834 is checked, the content is used, that 
is, decryption is performed, within the restriction set therein. 

In the content distribution using secure containers, when primary distribution is 
performed from a service provider to a user device or when secondary distribution 
(intergeneration distribution or secondary transmission) is performed among a plurality of user 
devices, user authentication is performed using a personal identification certificate (IDC). 
Furthermore, use of a content is limited within the restriction defined in the "UCP generation 
management information" and the "UCP allowable number of secondary distributions" included 
in the sales restriction (UCP) information in the secure container. Furthermore, reception of the 
content usage charge resulting from primary distribution or secondary distribution 
(intergeneration distribution or secondary transmission) can be automatically performed in 
accordance with the reception log generated in accordance with the price information and the 
sales restriction information described in the secure container. Thus, an additional process for 
settlement is not necessary. 

7. Link between personal Identification Certificates (IDC) and Public Key 
Certificates (PKC) 
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Manners of relating personal identification certificates (IDCs) to public key certificates 
(PKC), that is, manners of forming links therebetween are described below. 

In many situations, it is useful to manage personal identification certificates (IDCs) and 
public key certificates (PKCs) by relating them with each other. For example, a personal 
identification certificate (IDC) may be linked to a public key certificate of a public key applied to 
encryption of a template stored in the personal identification certificate, or, a link may be formed 
between a personal identification certificate and a public key certificate which are used in 
personal authentication, mutual authentication, and transmission of encrypted data during a 
process of establishing a connection for data commimication with a party such as a particular 
service provider, so that one certificate can be pointed to by the other certificate. 

Links between personal identification certificates (IDCs) and public key certificates 
(PKCs) may be formed not only in a one-to-one fashion in which one personal identification 
certificate (IDC) is linked to one public key certificate (PKC), but also in a one-to-many, many- 
to-one, or many-to-many fashions. There is a one-to-one correspondence between PKCs and 
IDCs when a unique person identified by a personal identification certificate (IDC) corresponds to 
a unique public key certificate (PKC). For example, when one device and one user of that device 
correspond to each other in a one-to-one fashion, a one-to-one link may be formed. 

PKCs and IDCs may be linked in a one-to-N ({>=} 2) fashion, when, for example, a 
plurality of persons identified by a plurality of personal identification certificates (IDCs) does not 
correspond to one public key certificate, that is, one device is shared by a plurality of users. 
PKCs and IDCs may be linked in a one-to-M ({>=} 2) fashion, when, for example, there are a 
plurality of public key certificates that a unique person identified by a personal identification 
certificate (IDC) uses or can use. PKCs and IDCs may be linked in a M-to-N (M, N {>=} 2) 
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fashion, when, for example, there are a plurality of public key certificates that a plurality of 
persons identified by a plurality of personal identification certificates (IDCs) use or can use and a 
device is shared by the plurality of persons. 

Furthermore, personal identification certificates (IDCs) and public key certificates 
(PKCs) may be linked in a one-way fashion (one direction link, directional link) in which only 
one type of certificates can be pointed to by the other type of certificates or in a two-way fashion 
in which any type of certificates can be pointed to by the other type of certificates. 

Specific examples of manners of forming links between personal identification 
certificates (IDCs) and public key certificates (PKCs) are described below with reference to Figs. 
47A and 47B and Figs. 48A and 48B for the respective cases of one-to-one, one-to-many, many- 
to-one, and many-to-many links. In any example described below, it is assumed that personal 
identification certificates (IDCs) are issued by a personal identification certificate authority 
(IDA) and a signature of the personal identification certificate authority (IDA) is written therein, 
and it is also assumed that public key certificates (PKCs) are issued by a certificate authority 
(CA) and a signature of the certificate authority (CA) is written therein. 

In any case, links can be formed in one of various manners described below. 

(1) A PKC identification number is embedded in an IDC 
(one-way link from the IDC to the PKC) 

(2) An IDC identification number is embedded in a PKC 
(one-way link from the PKC to the IDC) 

(3) A link structure ID is embedded in an IDC and a PKC. The link structure is 
identified by a link structure ID, and the link structure has an IDC identification number and a 
PKC identification number of the linked IDC and PKC. 
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(two-way link between the IDC and the PKC) 

(4) A pair of a PKC identification number and an EDC identification number is 
described in the outside of certificates. 

(one-way Hnk from the IDC to the PKC) 

(5) A pair of a PKC identification number and an IDC identification number is 
described in the outside of certificates. 

(one-way Hnk from the PKC to the IDC) 

(6) A pair of a PKC identification number and an IDC identification number is 
described in the outside of certificates. 

(two-way link between the PKC and the IDC) 

(7) A PKC is stored in an IDC 
(one-way link from the IDC to the PKC) 

(8) An IDC is stored in a PKC 
(one-way link from the PKC to the IDC) 

(9) A link information inquiry number or inquiry information is stored in each 
certificate 

(one-way link from one of the PKC and the IDC to the other or two-way link between 

them) 

As described above, link information may be stored in such a manner that an 
identification number of a linked certificate is stored (embedded) in a personal identification 
certificate (IDC) itself or a public key certificate (PKC) itself as in (1) and (2), or in such a 
manner that a link structure indicating a correspondence between identification numbers of 
linked certificates is created and an identifier (ID) of the link structure is described in a personal 
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identification certificate (IDC) or a public key certificate (PKC), that is, the Unk structure 
identifier serving as hnk identification data and identifiers of Hnked public key certificate 
identifiers and personal identification certificates are stored as in (3). Furthermore, as in (4), (5), 
and (6), link information indicating links between personal identification certificates (IDCs) and 
public key certificates (PKCs) is collected and managed in the outside of the certificates in an 
integral fashion by an agency or an organization, for example, by a link information management 
center or the like located on a network, and link information is extracted as required. Specific 
examples of the manners of forming links are described below. 
(PKC is stored in IDC) 

As described earlier, one manner of storing template information identifying a personal in 
a personal identification certificate (IDC) is to encrypt the template using a public key and store 
the encrypted template in the personal identification certificate (IDC). A public key certificate 
(PKC) which is generated in correspondence with the public key used to encrypt the template is 
set as a linked public key certificate (PKC) of the personal identification certificate (IDC), and 
this linked public key certificate (PKC) is stored in the personal identification certificate (IDC). 
Fig. 49A illustrates a manner in which a linked public key certificate (PKC) is stored in a 
personal identification certificate (IDC). 

As shown in Fig. 49A, the encrypted template and the public key certificate (PKC) of the 
public key applied to encryption of the template are stored in the personal identification 
certificate (IDC). As described earlier, the public key applied to the encryption of the template is 
one of a public key of a user or a user device, a public key of service provider (SP), and a public 
key of a personal identification certificate authority (IDA), and the public key certificate (PKC) 
stored in the personal identification certificate (IDC) is that of the public key employed to 
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encrypt the template. By forming the link in the above-described manner, the personal 
identification certificate (IDC) and the public key certificate (PKC) of the public key used to 
encrypt the template are combined together, that is two types of certificates are combined 
together in an inseparable fashion. When certificates are linked in this maimer, it is desirable 
that the expiration dates of the certificates be set such that the expiration date of the IDC {<=} 
the expiration date of the PKC. That is, it is desirable that the expiration dates be set such that 
the PKC stored in the IDC becomes valid during the entire period in which the IDC is valid. 
(IDC is stored in PKC) 

Fig. 49B illustrates a manner in which a linked personal identification certificate (IDC) of 
a public key certificate (PKC) is stored in the public key certificate (PKC) which is generated in 
correspondence with a public key employed to encrypt a template. 

As shown in Fig. 49B, the linked personal identification certificate (IDC) including 
template information encrypted v^th the public key corresponding to the public key certificate 
(PKC) is stored in the public key certificate (PKC). As described earlier, the public key applied 
to the encryption of the template is one of a public key of a user or a user device, a public key of 
a service provider (SP), and a public key of a personal identification certificate authority (IDA), 
and the public key certificate (PKC) in which the personal identification certificate (IDC) is 
stored is that of the public key employed to encrypt the template. By forming the link in the 
above-described manner, the personal identification certificate (IDC) and the public key 
certificate (PKC) of the public key used to encrypt the template are combined together, that is, 
two types of certificates are combined together in an inseparable fashion. Note that the personal 
identification certificate (IDC) itself exists independently. When certificates are linked in this 
manner, it is desirable that the expiration dates of the certificates be set such that the expiration 
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date of the PKC {<=} the expiration date of the IDC. That is, it is desirable that the expiration 
dates be set such that the IDC stored in the PKC becomes valid during the entire period in which 
the PKC is valid. 

(Identifier of a linked certificate is stored in a certificate) 

A manner is described in which an identifier of a certificate such as a unique 
identification number assigned to that certificate is stored in a certificate to be linked to the 
former certificate. 

Fig. 50A shows a manner in which an identification number of a public key certificate 
(PKC) is stored in a personal identification certificate (IDC), and Fig. SOB shows a manner in 
which an identification number of a personal identification certificate (IDC) is stored in a public 
key certificate (PKC). 

In the example shown in Fig. 50A in which the identification number of the public key 
certificate (PKC) is stored in the personal identification certificate (IDC), the public key 
certificate (PKC) is that corresponding to a public key used to encrypt a template stored in the 
personal identification certificate (IDC), as in the previous example. In this case, it is required 
that the public key certificate (PKC) should have been issued before the personal identification 
certificate (IDC) was issued. Because it is meaningless to store link information of a public key 
certificate (PKC) which has expired, it is desirable that the expiration dates be set such that the 
expiration date of the IDC {<=} the expiration date of the PKC. This link information storage 
manner is employed, for example, when it is not necessary to store a PKC in an IDC and when it 
is not desirable to distribute the PKC together v^th the IDC. 

In the example shown in Fig. SOB in which an identification number of a personal 
identification certificate (IDC) is stored in a public key certificate (PKC), not only an identifier 
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of a public key certificate (PKC) corresponding to a public key employed to encrypt a template 
stored in the personal identification certificate (IDC) but also an identifier of a public key 
certificate (PKC) having some relationship with the personal identification certificate (IDC) may 
also be stored. It is possible to relate a plurality of personal identification certificates (IDCs) to a 
single personal identification certificate (IDC). The expiration dates of the IDC and the PKC are 
not influenced by the validity of the respective certificates. However, only for the certificate of 
the public key used to encrypt the temple of the IDC, the expiration date should be such as IDC 
{<=} PKC. 

This link information storage manner may be employed, for example, when after 
performing user authentication on the basis of a personal identification certificate (IDC) in 
response to a request for access to a device, a plurality of linked public key certificates (PKCs) is 
used because a public key pair is necessary for each service. 

(Group Information is Managed Separately from PKC and IDC) 

Now, a manner is described in which link management data or group information (link 
information) indicating a link between a personal identification certificate (IDC) and a public 
key certificate (PKC) is formed separately from both the personal identification certificate (IDC) 
and the public key certificate (PKC), and information which makes it possible to access the link 
management data is stored in the IDC and the PKC. 

Figs. 51 A and 5 IB and Figs. 52 A and 52B show examples of manners of managing links 
using link management data. In the example shovm in Fig. 51 A, group information (link 
information) is created and maintained which includes the identifiers (numbers) of a personal 
identification certificate (IDC) and a public key certificate (PKC) and also includes the validity 
periods of the respective certificates. This method has the feature that the registering/issuing 
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timing of the respective certificates can be independent of each other. Another feature is that a 
record indicating a relationship between certificates can be generated and managed at a location 
where the record is required without imposing an influence upon any certificate. It is desirable 
that the validity period of the group information be set to be equal to the shortest validity period 
of those of the certificates related to each other. This method may be advantageously employed 
to mange link information, for example, when user authentication for a plurality of services is 
performed using one IDC and when different public key pairs are necessary for the respective 
services. 

In the example shown in Fig. 5 IB, group information (link information) is created and 
maintained which includes the identifiers (numbers) of a personal identification certificate (IDC) 
and a public key certificate (PKC) and also includes the validity periods of the respective 
certificates, wherein a group information serial number serving as an identifier of group 
information is stored in each certificate. The serial number of the group information is 
identification data uniquely assigned to each group information by a subject which manages the 
group information. When a PKC and an IDC linked to each other are issued, data indicating the 
serial number of the corresponding group information is stored as internal data in each 
certificate. This method has the feature that addition, change, and deletion of link information 
described in the group information is possible without causing an influence upon the certificates. 
This method may be advantageously employed to manage, using group information, the IDCs 
and PKCs of users to whom services are provided, when it is required that a service provider 
manage the IDC, PKC, and information related to services. 

In the example shown in Fig. 52A, group information serial number serving as an 
identifier of group information defined as primary information is stored in a personal 
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identification certificate (IDC) and a public key certificate (PKC). Furthermore, related 
information is created as secondary information such that the secondary information can be 
accessed from the primary information. Accessing to the primary information from the 
secondary information may also be possible if necessary. Plural pieces of secondary information 
may be related to primary information and may be managed separately. When a PKC and an 
IDC are requested to be registered or issued, the serial number of the linked group information is 
requested to be stored in the PKC and the IDC. Addition, change, deletion of related information 
does not have an influence upon the certificates. 

In the example shown in Fig. 52B, group information (link information) is created and 
maintained as primary information which includes the identifiers (numbers) of a personal 
identification certificate (IDC) and a public key certificate (PKC), and related information is 
linked as secondary information such that the secondary information can be accessed from the 
primary information. The link may also be formed, if necessary, such that accessing to the 
primary information from the secondary information may also be possible. 

In the case where related information is stored and managed at a plurality of different 
locations, secondary information identification data and index information are described in 
primary information so that information can be used and managed flexibly. For example, 
various service providers (SPs) may be subjects which manage primary information or secondary 
information, and the respective service providers (SPs) may access personal identification 
certificates (IDCs) and public key certificates (PKCs) of users to which services are to be 
provided by using the management information as customer information. 

As described above, in various aspects, a personal identification certificate (IDC) may be 
linked to a public key certificate of a public key applied to encryption of a template stored in the 
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personal identification certificate (IDC), or a link may be formed between a personal 
identification certificate and a public key certificate which are used in personal authentication, 
mutual authentication, and transmission of encrypted data during a process of establishing a 
connection for data communication with a party such as a particular service provider, so that one 
certificate can be easily reached fi-om the other certificate, thereby making it possible to quickly 
identify a key used in encryption or decryption of a template or to quickly identify data 
necessary, for example, in mutual authentication on the basis of a public key certificate after 
personal authentication for a service provider on the basis of a personal identification certificate. 

[8. Using a Content on the Basis of Person Identification Certificate (IDC) and Public 
Key Certificate (PKC)] 

A process of performing personal authentication on the basis of a personal identification 
certificate (IDC) and receiving (downloading) a content such as music data or image data from a 
service provider is described below with reference to specific examples. 

As can be understood from the above description, to perform personal authentication on 
the basis of a personal identification certificate, the system is required to be capable of 
comparing sampling information with a template and outputting the comparison result. Herein, a 
system is described which includes a user device used by a user as a content reproducing device 
and also includes a mechanism of comparing sampling information with a template, and which 
also has the capability of downloading a content from a service provider via a network 
depending upon the comparison result, performing user registration in a service provider, making 
a contract therewith, and erasing user registration therefrom, and requesting a personal 
identification certificate authority (IDA) to issue a personal identification certificate (IDC). The 
associated processes are also described below. 



- 113- 



Fig. 53 is a diagram illustrating a configuration of a user device capable of performing 
personal authentication and reproducing a content. A user device 500 includes a contents 
reproducing mechanism 501, a contents data storage unit 502, a user identifying apparatus 503, a 
network connection unit 504, a public key encryption unit 505, a selection unit 506, and an 
input/output unit 507. 

The contents reproducing mechanism 501 is capable of reproducing a content by reading 
data from the contents data storage unit. The contents data storage unit 502 serves to download 
content data via a network and store it therein. The user identifying apparatus 503 serves to 
input sampling information used to identify a user and convert the input sampling information 
into digital data and also serves to verify the sampling information by comparing the converted 
digital data with a template which has already been registered. The network connection unit 504 
serves to make a connection to a user device via a network. The public key encryption unit 505 
serves to add a signature to specified data, decrypt specified encrypted data, encrypt specified 
data, create a pair of a public key and a private key, and make a link between an arbitrary public 
key certificate and certain data. The public key encryption unit 505 is built in the form of a SAM 
(Secure Application Module). The selection unit 506 serves to select data in a reproducing 
operation, select a party to which a connection via a network is to be made, and select a content 
title to be downloaded. The input/output unit 507 serves as a user interface. More specifically, 
the input/output unit 507 controls a display device and an input device so that specified 
information is displayed or information input by a user is converted into data having a 
processable form. 

The public key encryption unit 505 of the user device 500 stores a public key certificate 
(PKC) and a personal identification certificate (IDC), wherein the public key certificate (PKC) 
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and the personal identification certificate (IDC) are described in a mutually linked data format 
such that either one of the public key certificate (PKC) or the personal identification certificate 
(IDC) can be pointed to by the other one. The specific manner of forming the link has been 
described above in [Link between Person Identification Certificates (IDC) and Public Key 
Certificates (PKC)]. A user executes a user authentication process using a personal identification 
certificate (IDC) stored in the public key encryption unit 505, and the user uses a public key 
certificate (PKC) in transaction with a service provider. 
(Dovmloading of Content) 

A process is described below which is performed by a user device constructed in the 
above-described marmer to download a content such as music data or image data from a service 
provider and reproduce it, depending upon the result of comparison/verification of sampling 
information with a template. Fig. 54 illustrates a flow of data in the contents downloading 
process, wherein the details of the flow are shown in the Figs. 55, 56, and 57. The process is 
described below with reference to these figures. Note that in the following description, the 
process numbers shown in Fig. 54 are denoted by (n) and the step numbers in Figs. 55 to 57 are 
denoted by (Snnn). 

(1) First, to use a device, a user inputs sampling data such as fingerprint information 
into the device (S301). 

(2) In order to compare the input sampling data with a template of a personal 
identification certificate (IDC) which has already been stored in the SAM, the user identifying 
apparatus requests the SAM to provide the personal identification certificate (IDC) (S302). 
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(3) The SAM retrieves the requested personal identification certificate (IDC) on the 
basis of the link information and returns the retrieved IDC or a template extracted from the IDC 
to the user identifying apparatus (S303 to S305). 

(4) The user identifying apparatus compares the sampling data with the template 
(S406). If the comparison result is affirmative, that is, if the user is verified as an authorized 
user, the user and the network connection unit are informed of the success of the user verification 
(S307, S308). Only when the user verification is affirmative, the network connection unit 
prepares for connection via the network (S309). 

(5) The user specifies desired data to be reproduced, via the interface provided by the 
input/output unit (S3 1 0, S3 1 1 ). 

(6) The selection unit converts the command accepted via the interface so as to 
generate a command for controlling the network connection unit (S3 11, S3 12) and transmits the 
control command to the network connection imit (S3 13). 

(7) The network connection unit requests the public key encryption unit to provide a 
public key certificate (PKC) necessary in transaction of content data (S3 14 to S3 16). 

(8) The public key encryption unit transmits the requested public key certificate 
(PKC) to the network connection unit (S3 17). In this process, as required, the public key 
encryption unit retrieves the requested PKC by examining the IDC-PKC link and returns the 
retrieved PKC to the network connection unit. 

(9) The network connection unit accesses a contents data providing server via a local 
network or the Internet (S3 18). Mutual authentication between the device and the server is 
performed on the basis of public key certificates, and a shared session key is created thereby 
establishing a secret communication path (S3 19). In Fig. 54, processes (9-1) to (9-8) are 
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performed when a user communicates with a server in an interactive fashion to receive a service, 
wherein these processes are performed as many times as required (S320, S321). Data are 
transmitted from the contents providing server to the user via the processes (9-1) to (9-4), and 
data is transmitted from the user to the contents providing server via the processes (9-5) to (9-8). 
In this data transmission/reception, it is desirable that data be encrypted as required using the 
session key, signatures be added using the respective private keys, and the signatures be verified 
using the pubUc key. 

(10) After completion of transmission of all data, the network connection unit 
dovmloads requested content data from the contents providing server (S322). 

(11) The network connection unit transfers the dovraloaded content data to the 
contents data storage unit to store it therein (S323), and the session is ended (S324). 

(12) In the case where reproducing of data is requested by the user, the content data is 
transferred to the contents reproducing imit (Yes in S325). 

(13) The user executes an operation for reproducing the content using the contents 
reproducing mechanism (S326), and uses the content via the input/output unit. 

The flow of downloading and reproducing a content has been described above. Note that 
the process described above is performed in an easy situation in which a public key certificate 
(PKC) and a personal identification certificate (IDC) are used when a content is downloaded, and 
these two certificates are stored in the SAM. Figs. 55 to 57 also show processes which are 
performed when there is no certificate or when a certificate is not required. The processes 
performed in such situations are described below. 

In Fig. 56, steps S328 to S332 are performed when a personal identification certificate 
(IDC) corresponding to a user is not found in a user device. In this case, the user device displays 
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a message via an input/output unit to inform the user that the IDC is not foimd (S328) and to 
request the user to determine whether or not to make a request for issuing an IDC (S329). In the 
case where the user inputs a command indicating that the user does not want the request to be 
made, the user device informs the user that the downloading has failed (S332). On the other 
hand, if the user inputs a command indicating that the user wants the request for issuing an IDC 
to be generated, the user device terminates the process of downloading the content and informs 
the user via the input/output unit that a process of generating a request for issuing an IDC is 
started (S330). Thereafter, the user device executes the process of generating a request for 
issuing an IDC (S331). The details of this process have been described above in [Registration 
and Change of Template and Person Identification Certificate (IDC)], 

In Fig. 57, step S333 and steps following that are performed when the public key 
certificate (PKC) is not stored in the user device. If acquisition of a public key certificate (PKC) 
from a certificate authority (CA) located outside is wanted (S333), it is determined whether the 
public key certificate (PKC) has already been registered (S334). If the registered public key 
certificate (PKC) is found, the public key certificate (PKC) is acquired from the certificate 
authority (CA) and stored in the user device (S335). 

If the registered public key certificate (PKC) is not found, it is required to newly issue a 
public key certificate (PKC). In this case, a pair of a public key and a private key is generated 
and a request for newly issuing a public key certificate (PKC) is sent to a registration authority 
(RA), that is, an agency which issues public key certificates (PKCs) (S336). If a public key 
certificate (PKC) has been newly issued, group information indicating a link to a personal 
identification certificate (IDC) is generated, and the public key certificate is stored (S338). 
However, the link information may be stored in various manners as described earlier, and thus 



. 118- 



the above-described process of generating and storing the group information is not necessarily 
required if the certificate includes link data therein. 

Step S339 and steps following that are performed when issuing of the public key 
certificate (PKC) is refused. In this case, the user device informs the user via the input/output 
unit that dovmloading has failed and the user device terminates the process. 

(User Registration, Erasure of User Registration, and Making Service Contract) 
Now, there is described a process associated with user registration in a service provider 
which provides various services such as providing of contents, selling of goods, and settlement, 
erasure of user registration, and making a service contract. Herein, it is assumed that the above 
process is performed in accordance v^th user authentication by means of comparison of a 
template with sampling information, performed by a user identifying apparatus included in a user 
device shown in Fig. 53. Fig. 58 illustrates a flow of data in user registration, erasure of user 
registration, and making a service contract, wherein the details of the flow are shovra in the Figs. 
63, 64, and 65. The process is described below with reference to these figures. Note that in the 
following description; the process numbers shovm in Fig. 58 are denoted by (n) and the step 
numbers in Figs. 59 to 61 are denoted by (Snim). 

(1) First, to use a device, a user inputs sampling data such as fingerprint information 
into the device (S401). 

(2) In order to compare the input sampling data with a template of a personal 
identification certificate (IDC) which has already been stored in the SAM, the user identifying 
apparatus requests the SAM to provide the personal identification certificate (IDC) (S402). 
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(3) The SAM retrieves the requested personal identification certificate (IDC) on the 
basis of the link information and returns the retrieved IDC or a template extracted from the IDC 
to the user identifying apparatus (S403 to S405). 

(4) The user identifying apparatus compares the sampling data with the template 
(S406). If the comparison result is affirmative, that is, if the user is verified as an authorized 
user, the user and the network connection unit are informed of the success of the user verification 
(S407, S408). Only when the user verification is affirmative, the network connection unit 
prepares for connection via the network (S409). 

(5) The user inputs data corresponding to a process to be performed, via the interface 
provided by the input/output irnit. More specifically, in the case of user registration, data 
indicating a desired site to be registered are input. Data indicating a site the registration of which 
is to be erased are input in the case of erasure of user registration. In the case of making a 
contract, data indicating a desired site a contract of which is to be made is input (S410). 

(6) The selection imit converts the command accepted via the interface so as to 
generate a command for controlling the network connection unit and transmits the control 
command to the network connection unit (S411). 

(7) The network connection unit requests the public key encryption unit to provide a 
public key certificate (PKC) necessary in transaction of content data (S412). 

(8) The public key encryption unit transmits the requested public key certificate 
(PKC) to the network connection unit (S413 to S415). In this process, the public key encryption 
unit retrieves the requested PKC by examining the IDC-PKC link and returns the retrieved PKC 
to the network connection xmit. 
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(9) The network connection unit accesses a service registration server or a user 
registration server via a local network or the Internet (S416). Mutual authentication between the 
device and the server is performed on the basis of public key certificates, and a shared session 
key is created thereby establishing a secret communication path (S417). In Fig. 58, processes (9- 
1) to (9-8) are performed when a user communicates with a server in an interactive fashion to 
receive a service, wherein these processes are performed as many times as required (S418, 
S419). Data is transmitted from the service registration server or the user registration server to 
the user via the processes (9-1) to (9-4), and data is. transmitted from the user to the service 
registration server or the user registration server via the processes (9-5) to (9-8). In this data 
transmission/reception, it is desirable that data be encrypted as required using the session key, 
signatures be added using the respective private keys, and the signatures be verified using the 
public key. 

(10) After completion of transmission of all data, the network connection unit 
dovmloads necessary data from the service registration server or the user registration server 
(S420). 

(11) If the process (user registration, erasure of user registration, making a contract) 
has been successfully completed, the network connection unit informs the public key encryption 
unit of the success of the process. Furthermore, if required, necessary information is added to 
the link information (group information) indicating the link between personal identification 
certificates (IDCs) and the public key certificates (PKCs) (S422, 423). However, the link 
information may be stored in various manners as described earlier, and thus the above-described 
process of generating and storing the group information is not necessarily required if the 
certificate includes link data therein. 
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(12) After completion of the above process, the result of the process is displayed via 
the input/output unit, and the process is ended (S424, S425). 

The flow of the process has been described above which is performed in connection with 
the service provider, such as user registration, erasure of user registration, making a service 
contract, in which user authentication is performed on the basis of a personal identification 
certificate (IDC). Note that the process described above is performed in an easy situation in 
which a public key certificate (PKC) and a personal identification certificate (IDC) are used, and 
these two certificates are stored in the SAM. Figs. 60 to 62 also show processes which are 
performed when there is no certificate or when a certificate is not required. The processes 
performed in such situations are described below. 

In Fig. 60, steps S426 to S430 are performed when a personal identification certificate 
(IDC) corresponding to a user is not found in a user device. In this case, the user device displays 
a message via an input/output unit to inform a user that the IDC is not found (S426) and to 
request the user to determine whether or not to make a request for issuing an IDC (S427). In the 
case where the user inputs a command indicating that the user does not want the request to be 
made, the user device informs the user that the process has failed (S430). On the other hand, if 
the user inputs a command indicating that the user wants the request for issuing an IDC to be 
generated, the user device terminates the process of downloading the content and informs the 
user via the input/output unit that a process of generating a request for issuing an IDC is started 
(S428). Thereafter, the user device executes the process of generating a request for issuing an 
IDC (S429). The details of this process have been described above in [Registration and Change 
of Template and Person Identification Certificate (IDC)]. 
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In Fig. 61, step S431 and steps following that are performed when the pubUc key 
certificate (PKC) is not stored in the user device. If acquisition of a pubUc key certificate (PKC) 
from a certificate authority (CA) located outside is wanted (S431), it is determined whether the 
public key certificate (PKC) has already been registered (S432). If the registered public key 
certificate (PKC) is found, the public key certificate (PKC) is acquired from the certificate 
authority (CA) and stored in the user device (S443). 

If the registered public key certificate (PKC) is not found, it is required to newly issue a 
public key certificate (PKC). In this case, a pair of a public key and a private key is generated 
and a request for newly issuing a public key certificate (PKC) is sent to a registration authority 
(RA), that is, an agency which issues pubUc key certificates (PKCs) (S434). If a public key 
certificate (PKC) has been newly issued, group information indicating a link to a personal 
identification certificate (IDC) is generated, and the public key certificate is stored (S436). 
However, the link information may be stored in various manners as described earlier, and thus 
the above-described process of generating and storing the group information is not necessarily 
required if the certificate includes link data therein. 

Steps S437 and S438 are performed when user registration, erasure of user registration, 
or making a service contract is refrised. In this case, the user device informs the user via the 
input/output unit that the process has failed and the user device terminates the process. Steps 
S439 and S440 are performed when issuing of a new public key certificate (PKC) is refused. In 
this case, the user device informs the user via the input/output unit that the process has failed and 
the user device terminates the process. 

(Request for a personal identification certificate (IDC) to be stored in a device and 
registration process) 
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A process of issuing and registering a personal identification certificate (IDC) which is to 
be stored in a user device including a user identifying apparatus shown in Fig. 53 is described 
below. Fig. 62 illustrates a flow of data in the process of making a request for a personal 
identification certificate (IDC) to be stored in the user device, wherein the details of the flow are 
shown in the Figs. 63, 64, and 65. The process is described below with reference to these 
figures. Note that in the following description, the process numbers shown in Fig. 62 are 
denoted by (n) and the step numbers in Figs. 63 to 65 are denoted by (Snrm). 

(1) First, to use a device, a user inputs sampling data such as fingerprint information 
into the device (S501). 

(2) In order to compare the input sampling data with a template of a personal 
identification certificate (IDC) which has already been stored in the SAM, the user identifying 
apparatus requests the SAM to provide the personal identification certificate (IDC) (S502). 
Herein, it is assumed that there are n personal identification certificates (IDCs) which have been 
issued to the user device and a process is performed to generate a request for issuing a new 
personal identification certificate (IDC) including a template. Note that n = 0 in the case where 
the user device does not have any personal identification certificate (IDC). 

(3) The user device sequentially retrieves n personal identificafion certificates (IDCs) 
which have been already stored, and returns the retrieved IDCs or templates extracted from the 
IDCs to the user identifying apparatus (S503 to S505). 

(4) The user identifying apparatus compares the sampling data with the templates 
(S506). If the sampling data matches with a template, and thus if it is determined that the user is 
an authorized user, the user is informed of the success of the user authentication (S507, S508). 
However, in this specific example, it is assumed that the sampling data does not match with the 
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template of any stored personal identification certificate (IDC), and thus a request for newly 
issuing a personal identification certificate (IDC) including template information is generated. 
That is, in the case where even when the sampling data has been compared with the templates of 
all stored IDCs, an IDC does not have a template which matches with the sampling data, the 
process goes to step S509. 

If a personal identification certificate (IDC) including a template which matches the 
sampling information is not found in the user device, the user device displays a message via an 
input/output unit to inform a user that the IDC is not found (S509) and to request the user to 
determine whether or not to make a request for issuing an IDC (S510). In the case where the 
user inputs a command indicating that the user does not want the request to be made, the user 
device informs the user that the process has failed (S512). On the other hand, if the user inputs a 
command indicating that the user wants the request for issuing an IDC to be generated, the user 
device informs the user via the input/output unit that a process of generating a request for issuing 
an IDC is started (S511). 

In Fig. 64, step S513 and the following steps are performed to issue a public key 
certificate (PKC) used in a process of issuing a personal identification certificate (IDC). 

In step S513, it is determined whether a public key certificate (PKC) is necessary in the 
process of issuing a personal identification certificate (IDC). If the PKC is necessary, the 
process goes to step S514 to acquire the identification number of the public key certificate (PKC) 
from an IDC or a PKC or link information (group information) stored in the public key 
encryption unit of the user device. (9) If the public key certificate (PKC) is foxmd (Yes in S516), 
the public key certificate (PKC) is transferred to the public key encryption imit (S516), a 
preparation for connection with an IDRA (registration authority which issues a personal 
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identification certificate (IDC)) (S517), and information necessary to issue the personal 
identification certificate (IDC) is input (S518). 

If acquisition of a public key certificate (PKC) from a certificate authority (CA) located 
outside is wanted (8520), it is determined whether the public key certificate (PKC) has already 
been registered (S521). If the registered public key certificate (PKC) is found, the public key 
certificate (PKC) is acquired from the certificate authority (CA) and stored in the user device 

(5522) . 

If the registered public key certificate (PKC) is not found, it is required to newly issue a 
public key certificate (PKC). In this case, a pair of a public key and a private key is generated 
(Fig. 62(5)) and a request for newly issuing a public key certificate (PKC) is sent to a registration 
authority (RA), that is, an agency which issues public key certificates (PKCs) (Fig. 62(6),(7)) 

(5523) . In the case where a public key certificate (PKC) has been newly issued (Fig. 62(8)) (Yes 
in S524), group information indicating a link to the personal identification certificate (IDC) is 
generated and the public key certificate is stored (S525). However, the link information may be 
stored in various manners as described earlier, and thus the above-described process of 
generating and storing the group information is not necessarily required if the certificate includes 
link data therein. 

Fig. 65 shows a process in which a personal identification certificate (IDC) is issued by 
communicating with an IDRA (registration authority which accepts registration of issuing of a 
personal identification certificate (IDC)). 

(10) To acquire a personal identification certificate (IDC) linked to the public key 
certificate (PKC), the public key encryption unit of the user device transfers the address of the 
IDRA and the sampling data (or the user name) to the network connection unit. Herein, it is 
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assumed that the off-line procedure necessary for issue of the personal identification certificate 
(IDC) has already been performed. If information (such as sampling data, PIN, or user name) is 
further necessary to compare with information (personal information) which has been registered 
in the off-line procedure and which is used by the IDRA to retrieve the IDC of the user, the 
information is also transferred at the same time to the network connection unit. 

(11) The network connection imit of the user device makes a connection to the IDRA 
via a local network or the Internet (S526). Mutual authentication between the device and the 
IDRA is performed on the basis of public key certificates, and a shared session key is created 
thereby establishing a secret communication path (S527). The user device transmits necessary 
data (such as sampling data, PIN, name, address, or telephone number) to the IDRA (S528). An 
interactive communication process between the user and the IDRA is performed as represented 
by (ll)-l to (ll)-8 in Fig. 62. (ll)-l to (ll)-4 are steps performed to transmit data from the 
IDRA to the user, and (1 1)-5 to (1 1)-8 are steps performed to transmit data from the user to the 
IDRA (S528). In this data transmission/reception, it is desirable that data be encrypted as 
required using the session, key, signatures be added using the respective private keys, and the 
signatures be verified using the public key. In the case where the personal identification 
certificate (IDC) to be issued will include a template encrypted with the public key of the user 
device, the user device transmits the public key (public key certificate) to the IDRA. 

After completion of transmission of all data, the network connection unit dovmloads 
necessary data and the result of the IDC issuing request (S530). 

(12) The IDRA verifies the IDC issuing request received from the user device. If it is 
determined that the request is valid, the IDRA requests an IDCA, which executes an IDC issuing 
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procedure, to issue an IDC. The personal identification certificate (IDC) issued by the IDCA is 
transmitted to the user device via the IDRA. 

(13) Upon receiving the personal identification certificate (IDC), the user device 
transmits the personal identification certificate (IDC) to the public key encryption unit. 

(14) The public key encryption unit generates link information (group information) 
indicating the link between the personal identification certificate (IDC) and the public key 
certificate (PKC) (S532) and updates the link information (group information) (S533). However, 
the link information may be stored in various manners as described earlier, and thus the above- 
described process of generating and storing the group information is not necessarily required if 
the certificate includes link data therein. 

(15) After completion of the above process, the result of the IDC issue request process 
is displayed via the input/output unit, and the process is ended (S534, S535). 

Steps S536 and S537 are performed when issuing of the public key certificate (PKC) is 
refused. In this case, the user device informs the user via the input/output unit that the process 
has failed and the user device terminates the process. Steps S538 and S539 are performed when 
issuing of a new public key certificate (PKC) is refused. In this case, the user device informs the 
user via the input/output unit that the process has failed and the user device terminates the 
process. 

9. One-Time Public Key Certificate (One-Time PKC) 

Now, a process performed by a certificate authority (CA) to issue a public key certificate 
(PKC) in accordance with user authentication using a template of a personal identification 
certificate authority (IDA) is described. Hereinafter, a public key certificate issued in such a 
manner is referred to as a one-time PKC. A one-time PKC is issued, for example, when a user 



- 128- 



wants to perform a transaction such as acquisition of a content from a service provider with 
which the user has not made a contract, wherein after performing user authentication on the basis 
of a personal identification certificate (IDC) which has already been registered in the personal 
identification certificate authority (IDA), the one-time PKC is issued without performing a 
rigorous examination of the certificate authority (CA). The one-time PKC is not regarded as an 
official public key certificate but regarded as valid only in a particular transaction such as a one- 
time transaction. 

Fig. 66 illustrates a procedure of issuing a one-time PKC. The process proceeds in the 
order of the numbers shown in Fig. 66. Fig. 67 is a flow chart illustrating the details of the 
procedure of issuing a one-time PKC. The process of issuing a one-time PKC is described below 
with reference to Figs. 66 and 67. 

First, a user, who wants to generate a request for issuing a one-time PKC, inputs 
sampling data such as fingerprint data to an identification request apparatus (Fig. 67, S201). The 
identification request apparatus generates a pair of the public key and the private key of the user 
who input the sampling data and employing it as a one-time PKC key set (S202). 

Thereafter, the identification request apparatus performs mutual authentication with a 
personal identification certificate authority (IDA) (S203). Provided that the mutual 
authentication is passed, the identification request apparatus transmits the sampling data, the 
generated public key, and the user identification data to the personal identification certificate 
authority (IDA) (S204). In the transmission of the data, it is desirable that the data be encrypted 
using the session key, and a signature be attached to the data. 

Upon receiving the data from the certificate requesting apparatus, the personal 
identification certificate authority (IDA) extracts a template from the personal identification 



- 129- 



certificate (IDC) which is identified by the user identification data and which has already been 
registered and compares the received sampUng data with the extracted template for verification 
(S205). Thereafter, the personal identification certificate authority (IDA) retrieves the user ID 
from a database (S206) and performs mutual authentication between the personal identification 
certificate authority (IDA) and the certificate authority (CA) (S207). Provided that the mutual 
authentication is successfully passed, the personal identification certificate authority (IDA) 
transmits the user ID and the public key to the certificate authority (CA) (S208). Also in this 
data transmission, it is desirable that data be encrypted and a signature be attached to the data. 

The certificate authority (CA) generates a public key certificate corresponding to the 
received public key as a one-time PKC and updates the issue history (S209, S210). The 
certificate authority (CA) transmits the generated one-time PKC to the certificate requesting 
apparatus via the personal identification certificate authority (IDA) (S211). 

Using the received one-time PKC, for example, the certificate requesting apparatus 
requests a service provider to provide a service. More specifically, the certificate requesting 
apparatus adds a signature encrypted with the generated private key to, for example, a content 
request data or a settlement request data and transmits it together with the public key certificate 
(one-time PKC) to the service provider (S212, S213). 

The service provider extracts the public key certificate (one-time PKC) from the received 
data, further extracts the public key of the user, and verifies the signature using the public key, 
thereby verifying the service request (S214). If the verification is successfully passed, the 
service provider provides the requested service (S215). Upon receiving the service, the 
certificate requesting apparatus deletes the public key and the private key generated in the 
certificate requesting apparatus and also deletes the issued one-time PKC (S216). Alternatively, 
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only the public key certificate in the form of a one-time PKC may be deleted without deleting the 
public key and the private key. 

The sequence of steps shown in Fig. 67, that is, the process from step S201 in which 
sampling data is transmitted to step S216 in which data is deleted, is automatically executed in 
accordance with a particular processing program which may be provided by the service provider. 
Thus, the one-time PKC transmitted to the certificate requesting is deleted from the certificate 
requesting apparatus when the process is completed, thereby ensuring that the one-time PKC is 
prevented from being used for another transaction. However, it is not necessarily required to 
delete the one-time PKC, but the one-time PKC may be used repeatedly for particular limited 
transactions. 

As described above, the template serving as user identification data of the user who 
generates a request for issuing a public key certificate (one-time PKC) is acquired from the 
personal identification certificate and compared with the sampling information to verify the 
authenticity of the user, and, provided that the user authentication is successfully passed, the 
public key certificate of the user is issued, thereby making it possible to quickly issue the public 
key certificate via a simplified issuing procedure. 

Furthermore, user authentication is performed at the personal identification certificate 
authority, the certificate authority responsible for issuing public key certificates (one-time PKCs) 
issues a public key certificate, provided that the user authentication is successfully passed, 
thereby allowing a reduction in a processing load in terms of the user authentication upon the 
certificate authority. 

Furthermore, because a public key certificate (one-time PKC), which is issued to a user 
provided that user authentication performed by a personal identification certificate authority by 
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comparing user's sampling information with a template stored in a personal identification 
certificate is successfully passed, is deleted when the usage of the public key certificate by an 
information processing apparatus which has received the public key certificate (one-time PKC) is 
completed, it is ensured that the public key certificate (one-time PKC) issued via the user 
authentication performed by the personal identification certificate authority can be used only for 
the particular purpose specified when the one-time PKC is issued. 
10. Verification Certificate 

When a template of a personal identification certificate and sampling information match 
with each other in a verification process, a personal identification certificate authority (IDA) 
certifies that a person who has provided the sampling information is the person corresponding to 
the personal identification certificate. In the examples described above, the verification result is 
given in the form of a message indicating either OK or NG. Alternatively, the personal 
identification certificate authority (IDA) may issue a verification certificate indicating that user 
authentication has been successfully passed. The process of issuing the verification certificate is 
described below. 

Fig. 68 illustrates a first usage manner in which a verification certificate is used. In Fig. 
68, the process proceeds in the order of numbers from 1 to 10. The further detailed flow is 
shown in Fig. 69. The process is described below with reference to Figs. 68 and 69. 

When a user wants to be subjected to personal authentication, the user first transmits 
sampling data to a personal certificate requesting apparatus (Fig. 69, S 101). Herein, the personal 
certificate requesting apparatus is, for example, a user device or a system capable of 
communicating with a service provider. 
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Thereafter, the personal certificate requesting apparatus performs mutual authentication 
with a personal identification certificate authority (IDA) (SI 02). Provided that the mutual 
authentication is successfully passed, the user certificate requesting apparatus transmits sampling 
data and the identifier (ID) of the personal certificate requesting apparatus to the personal 
identification certificate authority (IDA) (SI 03). In this data transmission, it is desirable that the 
data is encrypted using a session key generated in the authentication process or using the public 
key of the personal identification certificate authority (IDA). If the mutual authentication fails, 
error handling is performed (S122), but the following process is not performed. 

Thereafter, the personal identification certificate authority (IDA) extracts a template of 
the personal identification certificate (IDC) of the user subjected to the personal authentication, 
stored in a database of the personal identification certificate authority (IDA) and compares it 
with the received sampling data (SI 04). If the verification fails, the following process is not 
performed. 

The personal identification certificate authority (IDA) extracts the identifier (ID) of the 
user subjected to the personal authentication from the database of the personal identification 
certificate authority (IDA)(S105) and generates a verification certificate on the basis of the ID of 
the user whose authentication has been successfiiUy passed (SI 06). Furthermore, the personal 
identification certificate authority (IDA) updates the history of issuing verification certificates, 
that is, writes data indicating the date of issuing the certificate and the validity period thereof into 
the verification certificate issue history (SI 07). Thereafter, the personal identification certificate 
authority (IDA) issues the verification certificate to the personal certificate requesting apparatus 
(S108). 
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Furthermore, the process described below is performed when the user requests a service 
provider to provide a service, using the issued verification certificate. The user, who has 
received the issued verification certificate, adds a signature to the verification certificate and to 
an electronic message such as service request data and further attaches the public key certificate 
thereby generating a service request (SI 09). The generated service request is transmitted to the 
service provider (SI 10). 

The service provider extracts the public key from the received public key certificate and 
verifies the service request (Sill). If it is determined that the data has not been tampered with, 
the service provider provides a service to the user (SI 12). Upon receiving the service, the 
personal certificate requesting apparatus deletes the verification certificate (SI 13). 

The sequence of steps shown in Fig. 69, that is, the process from step SI 01 in which 
sampling data is transmitted to step SI 13 in which the verification certificate is deleted, is 
automatically executed in accordance with a particular processing program which may be 
provided by the service provider. Thus, the verification certificate transmitted to the personal 
certificate requesting apparatus is deleted firom the personal certificate requesting apparatus 
when the process is completed, thereby ensuring that the certificate is prevented from being used 
for another purpose. However, it is not necessarily required to delete the certificate, but the 
certificate may be used repeatedly for particular limited transactions. 

Fig. 70 illustrates a second manner of using a verification certificate. In this example, 
unlike the example shovm in Fig. 68, a service provider acquires a verification certificate of a 
user to whom a service is to be provided. 

A user, who wants to request a service provider to provide a service to the user, generates 
a request data including a service request and sampling data such as a fingerprint using a 
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certificate requesting apparatus and writes a signature therein. Thereafter, mutual authentication 
is performed between the certificate requesting apparatus and the service provider. If it is 
determined that the mutual authentication has been successftiUy passed, the service provider 
transmits the generated request data. 

Upon receiving the request data, the service provider verifies the signature to check 
whether or not the data has been tampered with. If it is determined that the data has not been 
tampered v^th, mutual authentication is performed between the personal identification certificate 
authority (IDA) and the service provider. Thereafter, the service provider transmits the sampling 
data received from the user and the ID of the certificate requesting apparatus together with an 
attached signature of the service provider. 

The personal identification certificate authority (IDA) verifies the received data to 
confirm that the data has not been tampered v^th. Thereafter, the personal identification 
certificate authority (IDA) compares the received sampling data with the template. If it is 
determined that they match with each other, the personal identification certificate authority 
(IDA) generates a verification certificate. Furthermore, the personal identification certificate 
authority (IDA) generates issue history data and stores it. 

The generated verification certificate is transmitted to the service provider. On the basis 
of the received verification certificate, the service provider determines that the authenticity of the 
user who has generated the service request has been certified, and the service provider notifies 
the certificate requesting apparatus and the user that the requested service is to be provided. The 
service provider deletes the verification certificate, and the process is ended. 

Fig. 71 shows an example of a format of the verification certificate. Respective data 
items are described below. 
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Version indicates the version of the verification certificate format. 

Serial Number indicates a serial number assigned by a personal identification authority 
(IDA) to a verification certificate. 

In Signature algorithm Identifier algorithm parameter, the signature algorithm of the 
verification certificate and parameters thereof are described. Either the elliptic curve 
cryptography or the RSA can be used as the signature algorithm, wherein in the case where the 
elliptic curve cryptography is employed, parameters and the key length are described, while the 
key length is described in the case where the RSA is employed. 

Issuer is a field in which the issuer of the verification certificate, that is, the name of the 
personal identification certificate authority (IDA) is described in the form of a distinguished 
name. 

Validity is a field to describe a period during which the certificate is valid, wherein a start 
date and an expiration date are described. 

Subject is a field in which the name of a subject or a user is described. In this field, more 
specifically, the ID or the name of the user is described. 

In Subject IDA Info, personal identification certificate information of the user, such as 
the certificate number of the personal identification certificate and the unique ID of the person, is 
described. 

In Subject PKC Info, the public key certificate information of the person to be 
certificated, such as the certificate number of the public key certificate of the person to be 
certificated and the unique ID of the person of the public key certificate of the person to be 
certificated, is described. 



- 136- 



The digital signature is data which is created by generating a hash value by applying a 
hash function to all fields of the certificate and then encrypting the resultant hash value using the 
public key of the personal identification certificate authority (IDA). 

As described above, the verification certificate includes the public key certificate 
information and the personal identification certificate information so that links to the public key 
certificate and the personal identification certificate can be formed. The identification data of the 
person to be certified is also included. 

1 1 . Downloading of Person Identification Certificate (IDC) and Usage of a Content 

When a user uses a device in which a personal identification certificate (IDC) of that user 
is not stored, the user can receive a service such as distribution of a content by performing user 
authentication using a personal identification certificate (IDC) which has already been registered 
in a personal identification certificate authority (IDA), as is described below. 

A user, who wants to receive various contents such as music data or image data from a 
service provider, does not necessarily use a single user terminal (user device) but, in some cases, 
uses a plurality of devices. For example, the user may use a device installed in his/her home, a 
device installed in a company, and a device which is opened for use by a plurality of unspecified 
users. 

To perform personal authentication using the above-described personal identification 
certificate (IDC), it is required to access the personal identification certificate. For example, if a 
user device that a user A frequently uses includes a personal identification certificate (IDC), 
personal authentication can be performed using the stored IDC. However, it is not realistic that 
the device installed in the company or the device which is opened for use by a large number of 
unspecified users include personal identification certificates (IDCs) of all possible users. In the 
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device in such a situation, personal authentication may be performed using personal 
identification certificates (IDCs) which have already been registered in a personal identification 
certificate authority (IDA) to receive a content in accordance with the personal authentication, as 
is described below. 

Fig. 72 shows a process in which personal authentication is performed using a personal 
identification certificate (IDC) which has already been registered in a personal identification 
certificate authority (IDA), and, if the personal authentication is successfully passed, a content is 
distributed to the user. In Fig. 72, the process proceeds in the order of numbers from 1 to 11 . 
The further detailed flow is shown in Figs. 73 to 75. The process is described below with 
reference to Fig. 72 and Figs. 73 to 75. 

As shovm in Fig. 72, a user A executes a process such as reception of a content using a 
device A of the user A. To this end, the device A includes various certificates which are needed 
to receive a content. More specifically, a public key certificate (PKC) and a personal 
identification certificate (IDC) of the user A and also a public key certificate (PKC) of the device 
A are stored in the user device A. The user A can execute a mutual authentication process using 
various PKCs as required and also can execute a personal authentication process using the IDC. 

Herein, it is assumed that the user A receives a service such as distribution of a content 
using another device. In the specific example shovm in Fig. 72, the user A uses a device B of a 
user B to receive a service. A public key certificate (PKC) and a personal identification 
certificate (IDC) of the user B and a public key certificate (PKC) of the device B are stored in the 
user device B. Although the user B" can execute mutual authentication and personal 
authentication using these certificates, the user A, in some cases, cannot execute personal 
authentication or mutual authentication using only the certificates stored in the device B. In such 
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a case, the user A may receive a service of content distribution using the device B, if user 
authentication on the basis of an IDC and mutual authentication on the basis of a PKC are 
performed as described below. 

When the user A wants to use the device B, the user A first accesses (activates) the 
device B (S801). To determine whether the access is from a user authorized to access the device 
B, the device B starts a personal authentication process (S802). Thus, the user A is requested to 
input sampling information. In response, the user A inputs sampling information such as a 
fingerprint and a user ID to the device B (S803). The device B retrieves an IDC stored in a 
storage means in the device B on the basis of the user ID or the sampling information (S804). In 
this specific case, the IDC corresponding to the user A is not stored in the device B, and thus the 
IDC is not found. In this case, the device B requests a personal identification certificate 
authority (IDA) to transmit the IDC of the user A. In this process, the device B executes mutual 
authentication with the personal identification certificate authority (IDA) and transmits the user 
ID and the sampling information of the user A to the personal identification certificate authority 
(IDA) after encrypting them using a session key created during the mutual authentication. 

The personal identification certificate authority (IDA) retrieves the personal identification 
certificate (IDC) of the user A from a database of the personal identification certificate authority 
(IDA) and transmits the retrieved personal identification certificate (IDC) to the device B. The 
personal identification certificate (IDC) includes template information which is stored in a form 
the device B can use. More specifically, for example, the template is encrypted using the public 
key of the device B. The device B stores the received personal identification certificate (IDC) of 
the user A in a memory of the device B (S806). 
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The device B makes a comparison with the sampling data using the personal 
identification certificate (IDC) of the user A stored in the memory, that is, the device B performs 
personal authentication (S807). If the comparison fails, error handling is performed but the 
following process is not performed. 

If the personal authentication is successfully passed, the device B retrieves a pair of a 
public key and a private key applicable to the service provided by the service provider (S809). 
In the data communication with various users for the user authentication or for other purposes, 
the service provider encrypts the data using a pair of a public key and a private key assigned to 
each user or each device. In this specific example, a pair of a public key and a private key solely 
for the user A is not stored in the device B, and thus the result of the decision step S810 becomes 
negative (No). Thus, the device B creates a new pair of a public key and a private key (SB 11). 

Thereafter, the device B transmits the generated public key to a certificate authority (CA) 
to request it to issue a public key certificate, thereby acquiring the public key certificate (PKC) 
of the user A. The acquired PKC is stored in the device B (S812). 

The device B then forms a link between the personal identification certificate (IDC) and 
the public key certificate (PKC) of the user A (S813). More specifically, for example, the link is 
formed by creating group information as is described earlier and stores it in the memory. In this 
process, the link information (group information) is related to service names which are allowed 
to be used using the IDC and the PKC and registered (S813). That is, to indicate which service 
provider or which content provider the set of the IDC and the PKC can be used to receive a 
service from, process identifiers such as provider identifiers or service identifiers are registered 
together with the link information. 
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Thereafter, the device B performs mutual authentication with a service registration server 
using the public key certificate (PKC) of the user A (S814). The service registration server is a 
server in which users of one or more service providers (such as a content distribution server) are 
registered. More specifically, public key certificates (PKCs) of respective users are registered so 
as to make it possible for a service provider connected to the service registration server to 
perform, using the registered PKCs, various encryption processes which are needed in, for 
example, authentication when a service is provided. 

If the mutual authentication with the service registration server is successfully passed, 
authentication of the user A for the service registration server is performed using the personal 
identification certificate (IDC) of the user A (S816). After completion of these steps, the service 
registration server registers the public key certificate (PKC) of the user A (S818). Note that, in 
the above process, the personal authentication is executed as required, and it is not necessarily 
needed. For example, when a content is distributed, personal authentication may be performed 
by a content distribution server. 

The device B receives from the service registration server a message indicating that the 
public key certificate (PKC) of the user A has been registered, and furthermore the device B 
receives information about services which are available using the registered public key certificate 
(PKC) of the user A and also receives PKCs of content distribution servers (S819). 

The following process is performed when a content is received from a content 
distribution server. In step S820, mutual authentication is performed using the PKC of the 
content distribution server and the PKC of the user A, If the mutual authentication is successfully 
passed, distribution of a content is performed (S822). In the above process, in response to 
receiving a request for a content from the device B, the content distribution server checks 
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whether the PKC used in the mutual authentication performed in response to the request for the 
content is registered as a PKC for using the content in the service registration server. Only when 
the PKC is determined to be usable for the content, the distribution of the content is performed. 
In this specific example, because the public key certificate (PKC) of the user A has already been 
registered in the service registration server, the request for the content is accepted and the 
distribution of the content is performed. 

As described above, even when a personal identification certificate (IDC) and a public 
key certificate (PKC) of a user are not stored in a device, a user can receive a service from a 
service provider by downloading an IDC registered in the personal identification certificate 
authority (IDA) into the device, receiving a public key certificate (PKC) from a certificate 
authority (CA) using a pair of a public key and a private key generated by the device, performing 
personal authentication on the basis of the IDC, performing mutual authentication on the basis of 
the PKC, and performing encryption of data. 

The process performed using the personal identification certificate (IDC) and the public 
key certificate (PKC) assigned to a user has been described above. Now, a process performed 
using a personal identification certificate (IDC) assigned to a user and a public key certificate 
(PKC) assigned to a device is described below. 

Fig. 76 shows a process in which personal authentication is performed using a personal 
identification certificate (IDC) assigned to a user and a public key certificate (PKC) assigned to a 
device and also using a personal identification certificate (IDC) which has already been 
registered in a personal identification certificate authority (IDA), and then a content is distributed 
to the user using the public key certificate (PKC) assigned to the device. In Fig. 76, the process 
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proceeds in the order of numbers from 1 to 6. The further detailed flow is shown in Figs. 77 and 
78. The process is described below with reference to Fig. 76 and Figs. 77 and 78. 

As shown in Fig. 76, a user A usually executes a process such as reception of a content 
using a device A of the user A. To this end, the device A includes various certificates which are 
needed to receive a content. More specifically, a public key certificate (PKC) and a personal 
identification certificate (IDC) of the user A and also a public key certificate (PKC) of the device 
A are stored in the user device A. The user A can execute a mutual authentication process using 
various PKCs as required and also can execute a personal authentication process using the IDC. 

Herein, it is assumed that the user A receives a service such as distribution of a content 
using another device. In the specific example shown in Fig. 76, the user A uses a device B of a 
user B to receive a service. A personal identification certificate (IDC) of the user B and a public 
key certificate (PKC) of the device B are stored in the user device B. Although the user B can 
perform mutual authentication and personal authentication using these certificates, the user A 
cannot execute personal authentication using only the certificates stored in the device B. Even in 
such a case, the user A can receive a content using the device B by performing a process shown 
in Fig. 77 and the following figure, in which personal authentication is performed using an IDC 
and mutual authentication is performed using a PKC. 

When the user A wants to use the device B, the user A first accesses (activates) the 
device B (S851). To determine whether the access is from a user authorized to access the device 
B, the device B starts a personal authentication process (S852). Thus, the user A is requested to 
input sampling information. In response, the user A inputs sampling information such as a 
fingerprint and a user ID to the device B (S853). The device B retrieves an IDC stored in the 
device B on the basis of the user ID or the sampling information (S854). In this specific case, 
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the IDC corresponding to the user A is not stored in the device B, and thus the IDC is not found. 
In this case, the device B requests a personal identification certificate authority (IDA) to transmit 
the IDC of the user A. In this process, the device B executes mutual authentication with the 
personal identification certificate authority (IDA) and transmits the user ID and the sampling 
information of the user A to the personal identification certificate authority (IDA) after 
encrypting them using a session key created during the mutual authentication. 

The personal identification certificate authority (IDA) retrieves the personal identification 
certificate (IDC) of the user A from a database of the personal identification certificate authority 
(IDA) and transmits the retrieved personal identification certificate (IDC) to the device B. The 
personal identification certificate (IDC) includes template information which is stored in a form 
the device B can use. More specifically, for example, the template is encrypted using the public 
key of the device B. The device B stores the received personal identification certificate (IDC) of 
the user A in a memory of the device B (S856). 

The device B makes a comparison with the sampling data using the personal 
identification certificate (IDC) of the user A stored in the memory, that is, the device B performs 
personal authentication (S857). If the verification fails, an error is returned and the following 
process is not performed. 

If the personal authentication is successfully passed, the device B retrieves a pair of a 
public key and a private key applicable to the service provided by the service provider (S859). 
In the data communication with various users for the user authentication or for other purposes, 
the service provider encrypts the data using a pair of a public key and a private key assigned to 
each user or each device. Herein, a pair of a public key and a private key of the device B is 
usable. The device B performs mutual authentication with a service registration server using the 
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public key certificate (PKC) of the user A (S860). The service registration server is a server in 
v^hich users of one or more service providers (such as a content distribution server) are 
registered. More specifically, public key certificates (PKCs) of respective users are registered so 
as to make it possible for a service provider connected to the service registration server to 
perform, using the registered PKCs, various encryption processes which are needed in, for 
example, authentication v^hen a service is provided. Herein, it is assumed that the service 
registration server registers public key certificates (PKCs) of respective devices, or public key 
certificates (PKCs) of respective devices and personal identification certificates (IDCs) of 
respective users. 

If the mutual authentication v^th the service registration server is successfully passed, 
authentication of the user A for the service registration server is performed using the personal 
identification certificate (IDC) of the user A (S862). After completion of the above process, the 
device B receives from the service registration server a message indicating that services are now 
available and fiirther receives information about what services are available and also receives 
PKCs of content distribution servers (S864). 

The following process is performed when a content is received from a content 
distribution server. In step S865, mutual authentication is performed using the PKC of the 
content distribution server and the PKC of the device B. If the mutual authentication is 
successfiiUy passed, distribution of a content is performed (S867). In the above process, in 
response to receiving a request for a content from the device B, the content distribution server 
checks whether the PKC used in the mutual authentication performed in response to the request 
for the content is registered as a PKC for using the content in the service registration server. 
Only when the PKC is determined to be usable for the content, the distribution of the content is 
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performed. In this specific example, because the public key certificate (PKC) of the device B 
has already been registered in the service registration server, the request for the content is 
accepted and the distribution of the content is performed. 

As described above, even when a personal identification certificate (IDC) and a public 
key certificate (PKC) of a user is not stored in a device, a user can receive a service from a 
service provider by downloading an IDC registered in the personal identification certificate 
authority (IDA) into the device, performing personal authentication on the basis of the IDC using 
the public key certificate (PKC) of the device stored in that device, performing mutual 
authentication on the basis of the PKC, and performing encryption of data. 

12. Setting the Validity Period of Person Identification Certificate (IDC) 

As described above, a personal identification certificate (IDC) includes template 
information for identifying a person, such as fingerprint information, a password, or other 
personal information. Although the template information is encrypted, there is still a non-zero 
possibility that the template information may be decrypted or tampered with. From this 
viewpoint, it is undesirable that there are a large number of uncontrolled personal identification 
certificates (IDCs). It is important to control the personal identification certificates (IDCs) which 
are issued by personal identification certificate authorities (IDAs) and used by user devices 
(UDs) or service providers (SPs). 

Now, there is described a method of managing IDCs so as to prevent an IDC and a 
template from remaining in a state in which the IDC or the template can be used for a limitless 
period, by setting the validity information of a personal identification certificate (IDC), and more 
particularly, by setting the period during which the IDC is valid or the maximum number of 
times the IDC is allowed to be used. By setting the validity period, it becomes possible to 
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examine a user at scheduled intervals, and it also becomes possible to easily check the validity of 
a user to v^hom a personal identification certificate (IDC) has issued. 

Fig. 79 illustrates a personal identification certificate (IDC) in which validity information 
(expiration date and the number of times the IDC is allow^ed to be used) of the personal 
identification certificate (IDC) and also the expiration date of template information stored in the 
IDC are set. A personal identification certificate authority (IDA) 1001 issues a personal 
identification certificate (IDC) of a user and distributes it to an entity w^hich executes personal 
authentication, such as a service provider (SP) 1002 and a user terminal 1003. In the service 
provider (SP) 1002 and the user terminal 1003, the personal identification certificate (IDC) 
issued by the IDA is stored and is used in personal authentication in which sampling information 
given by a user is compared with information described in the IDC. 

As shown in Fig. 79, the personal identification certificate (IDC) issued by the personal 
identification certificate authority (IDA) 1001 includes "expiration date of usage/maximum 
number of times the IDC is allowed to be used" 1004 and "expiration date of the template" 1005, 
wherein a signature 1006 using a private key of the personal identification certificate authority 
(IDA) is attached to the whole of the IDC. When a service provider 1002 or a user terminal 1003 
receives a personal identification certificate (IDC), the service provider 1002 or the user terminal 

1003 verifies the signature 1006 using the public key of the personal identification certificate 
authority (IDA) 1001 to check whether or not the personal identification certificate (IDC) has 
been tampered with. 

The "expiration date of usage/maximum number of times the IDC is allowed to be used" 

1004 stored in the personal identification certificate (IDC) is data indicating the validity of the 
IDC itself. The "expiration date of usage/maximum number of times the IDC is allowed to be 
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used" 1004 is set by the personal identification certificate authority (IDA) 1001 which issues the 
personal identification certificate (IDC) and is stored in the IDC. Even for IDCs in which the 
template information of the same user is stored, the personal identification certificate authority 
(IDA) 1001 may set different "expiration date of usage/maximum number of times the IDC is 
allowed to be used" depending upon service provider or user devices to which the IDCs are 
provided. When a service provider or a user device performs personal authentication using an 
IDC, the "expiration date of usage/maximum number of times the IDC is allowed to be used" 
stored in the personal identification certificate (IDC) is verified before making a comparison 
with sampling information. Only when the "expiration date of usage/maximum number of times 
the IDC is allowed to be used" 1004 is met, the comparison is performed. 

The "expiration date of the template" 1005 stored in the personal identification certificate 
(IDC) is data indicating the expiration date of the template information stored in the IDC. The 
"expiration date of the template" 1005 is set by the personal identification certificate authority 
(IDA) 1001 which issues the personal identification certificate (IDC) or by a user himself/herself 
who provides personal data on the basis of which the template information is generated. In the 
case where the expiration date of the template information is set by a user, the user sends the 
expiration date information together with the personal identification data to the personal 
identification certificate authority (IDA) 1001, which in turn sets the expiration date of the 
template information in accordance with the received expiration date information and stores it in 
the IDC. When a service provider or a user device performs personal authentication using an 
IDC, the "expiration date of usage/maximum number of times the IDC is allowed to be used" 
1004 stored in the personal identification certificate (IDC) and also the "expiration date of the 
template" 1005 of the template information are verified before comparing sampling information 
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with the template stored in the IDC. Only when the expiration date of the IDC and the expiration 
date of the template are met, the comparison is performed. 

Figs. 80A and SOB illustrate manners of managing the "expiration date of 
usage/maximum number of times the IDC is allowed to be used" and the "expiration date of the 
template" of the template information stored in the personal identification certificate (IDC). Fig. 
80 A illustrates an example in which the usage validity period 1014 and the expiration date of the 
template 1015 are stored, and Fig. SOB illustrates an example in which the number of times the 
IDC is allowed to be used 1017 and the expiration date of the template 1015 are stored. 

When a service provider or a user device stores into a storage terminal thereof an IDC, 
shown in Fig. SO A, in which the usage validity period 1014 and the expiration date of the 
template 1015 are stored, the IDC is stored after verifying the signature 1016 of the IDC to 
confirm that the data has not been tampered with. On the other hand, when personal 
authentication is performed using the stored IDC, the usage validity period 1014 and the 
expiration date of the template 1015 stored in the IDC are verified before making a comparison 
with sampling information given by a user. Only in the case where the expiration dates have not 
been reached, the following process is performed. In the case where either expiration date has 
been exceeded, error handling is performed and the comparison with the sampling information is 
not performed. 

When a service provider or a user device stores into a storage terminal thereof an IDC, 
shown in Fig. SOB, in which the number of times the IDC is allowed to be used 1017 and the 
expiration date of the template 1015 are stored, the IDC is stored after verifying the signature 
1016 of the IDC to confirm that the data has not been tampered with. Furthermore, the SAM 
(Secure Application Module) 1020 information indicating the count of usage of the IDC 1019 set 
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in the IDC is stored in a SAM 1020 of the device. In the data stored therein, a signature 1018 is 
written using a private key of the SAM 1020 so as to prevent the data from being tampered with. 
On the other hand, when personal authentication is performed using the stored IDC, the 
expiration date of the template 1015 stored in the IDC and also the SAM 1020 information 
indicating the count of times the IDC is used 1019 stored in the SAM 1020 are verified before 
making a comparison with sampling information given by a user. Only when the expiration date 
of the template has not been reached and when the count of usage of the IDC is not equal to zero, 
the comparison is performed. If the expiration date has been exceeded, or if the count of usage 
of the IDC is equal to zero, error handling is performed and the comparison with the sampling 
information is not performed. In the case where the comparison with the sampling information 
was performed, the count of usage of the IDC stored in the SAM 1020 is reduced (decremented) 
by one. 

Fig. 81 illustrates a manner of managing the expiration date of the IDC and the expiration 
date of the template. First, a personal identification certificate authority (IDA) 1001 which 
issues a personal identification certificate (IDC) determines the rule of setting the expiration date 
of the IDC and the expiration date of the template. A user, who wants a personal identification 
certificate (IDC) to be issued, provides personal identification information and personal 
information needed to issue an IDC to the personal identification certificate authority (IDA) 
1001. The personal identification certificate authority (IDA) 1001 performs user authentication 
and verifies the data. If it is determined that the IDC issue request is valid, the personal 
identification certificate authority (IDA) newly issues a personal identification certificate (IDC). 
In the case where the process is performed online, mutual authentication is performed, a 
signature is added to data to be transmitted, and verification is performed. When a user wants to 
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specify the expiration date of the template, the user sends his/her personal information to the 
IDA and furthermore informs the E)A of the desired date to be set as the expiration date. The 
IDA sets the expiration date of the template in the IDC in accordance with the specified date. 

When a service provider 1002 has a transaction with a user, the service provider 1002 
requests a personal identification certificate authority (IDA) 1001 to issue an IDC for use in user 
authentication. The personal identification certificate authority (IDA) 1001 issues to the service 
provider 1002 a personal identification certificate (IDC) in which the expiration date of the IDC 
and the expiration date of the template are set. The issued personal identification certificate 
(IDC) includes a signature written using a private key of the personal identification certificate 
authority (IDA) 1001. When commimication is performed between the service provider 1002 
and the personal identification certificate authority (IDA) 1001, mutual authentication is 
performed, a signature is added to data to be transmitted, and verification is performed. 

After verifying the signature using the public key, stored in the service provider 1002, of 
the personal identification certificate authority (IDA) 1001, the service provider 1002 stores the 
IDC in a memory. To authenticate a user, the IDC expiration date and the template expiration 
date described in the IDC are verified before making a comparison with sampling information. 
Only when the expiration dates have not been reached, the service provider 1002 accepts 
sampling information from a user and performs a comparison process. In the example shown in 
Fig. 81, the template information of the personal identification certificate (IDC) is encrypted 
using the public key of the service provider, and thus the template is extracted from the IDC by 
performing decryption using the private key of the service provider and is used for comparison. 
If the user authentication is successfully passed, transaction with the user, such as providing of a 
content, is performed. 
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Fig. 82 illustrates a manner of managing the number of times the IDC is allowed to be 
used and the template expiration date. First, a personal identification certificate authority (IDA) 
1001 which issues a personal identification certificate (IDC) determines the rule of setting the 
expiration date of the IDC and the expiration date of the template. A user, who wants issue of a 
personal identification certificate (IDC), provides personal information needed to issue an IDC to 
the personal identification certificate authority (IDA) 1001. The personal identification 
certificate authority (IDA) 1001 performs user authentication and verifies the data. If it is 
determined that the IDC issue request is valid, the personal identification certificate authority 
(IDA) newly issues a personal identification certificate (IDC). When a user wants to specify the 
expiration date of the template, the user sends his/her personal information to the IDA and 
furthermore informs the IDA of the desired date to be set as the expiration date. The IDA sets 
the expiration date of the template in the IDC in accordance with the specified date. 

When a service provider 1002 has a transaction with a user, the service provider 1002 
requests a personal identification certificate authority (IDA) 1001 to issue an IDC for use in user 
authentication. The personal identification certificate authority (IDA) 1001 issues to the service 
provider 1002 a personal identification certificate (IDC) in which the number of times the IDC is 
allowed to be used and the template expiration date are set. The issued personal identification 
certificate (IDC) includes a signature vmtten using a private key of the personal identification 
certificate authority (IDA) 1001. 

After verifying the signature using the public key, stored in the service provider 1002, of 
the personal identification certificate authority (IDA) 1001, the service provider 1002 stores the 
IDC in a memory. Furthermore, the count of usage of the IDC, set in the IDC, is stored in a 
SAM (Secure Application Module) of the service provider 1002. On the other hand, when 
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personal authentication is performed using the stored IDC, the template expiration date stored in 
the IDC is verified and furthermore the count of usage of the IDC stored in the SAM of the 
service provider 1002 is verified before making a comparison with sampling information given 
by a user. Only when the expiration date of the template has not been reached and when the 
count of usage of the IDC is not equal to zero, the comparison is performed. If the expiration 
date has been exceeded, or if the count of usage of the IDC is equal to zero, error handling is 
performed and the comparison with the sampling information is not performed. In the case 
where the comparison with the sampling information was performed, the count of usage of the 
IDC stored in the SAM is reduced (decremented) by one. In the example shown in Fig. 82, in 
the process of acquiring the personal identification certificate (IDC), the user template is 
encrypted using the public key of the service provider, and thus the template is extracted from 
the IDC by performing decryption using the private key of the service provider and is used for 
comparison. If the user authentication is successfully passed, transaction with the user, such as 
providing of a content, is performed. 

Referring to Fig. 83, the process of controlling the usage of an IDC in accordance with 
the "expiration date of usage/maximum number of times the IDC is allowed to be used" and 
"expiration date of the template" of the personal identification certificate (IDC) is described. 

If a service provider or a user terminal starts the user authentication on the basis of an 
IDC (SI 001), a user inputs or transmits a user ID and sampling data (SI 002). The service 
provider or the user terminal which performs the personal authentication retrieves an IDC on the 
basis of the user ID and determines whether or not the IDC exists (S1003). If the IDC is not 
found, the service provider or the user terminal generates an IDC issue request to a personal 
identification certificate authority (IDA) to acquire the IDC (SI 004). 
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Thereafter, the "template expiration date" information is extracted from the personal 
identification certificate (IDC) and verifies the template expiration date (SI 005). If the 
expiration date has been reached, the service provider or the user terminal requests the personal 
identification certificate authority (IDA) to issue an IDC in which a new "template expiration 
date" is set, thereby acquiring the IDC (SI 006). 

The "IDC expiration date" information is then extracted from the personal identification 
certificate (IDC) and verifies tiie IDC expiration date (SI 007). If the expiration date has been 
reached, the service provider or the user device requests the personal identification certificate 
authority (IDA) to issue an IDC in which a new "IDC expiration date" is set, thereby acquiring 
the IDC (SI 008). 

Thereafter, it is determined whether the "number of times the IDC is allowed to be used" 
is set in the personal identification certificate (IDC) (SI 009). If it is set, the count of IDC usage 
stored in the SAM of the service provider or the user terminal is read, and it is determined 
whether the count of IDC usage is equal to zero (SI 010). If the count of IDC usage is not equal 
to zero (SI Oil), the service provider or the user device requests the personal identification 
certificate autiiority (IDA) to issue an IDC in which a new "count of IDC usage" is set, thereby 
acquiring the IDC (S1012). After acquiring the IDC, the count of IDC usage described in the 
newly issue IDC is set in the SAM (S1013). 

Thereafter, a template is extracted from the IDC and compared with sampling 
information given by the user (SI 01 4). After completion of the comparison, if the number of 
times the IDC is allowed to be used is set in the IDC (Yes in S 101 5), the count of IDC usage 
stored in the SAM is decremented by one (SI 01 6). If tiie count of IDC usage becomes equal to 
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zero (Yes in SI 01 7), the IDC is deleted from the SAM (SI 01 8), and the process is performed 
depending upon the comparison result (S1019). 

Referring to Fig. 84, there is provided a process which is performed to update a personal 
identification certificate (IDC) when a personal identification certificate (IDC) is used if it turns 
out that the "IDC expiration date" has been reached. 

Herein, it is assumed that a personal identification certificate (IDC) of a user has been 
created by a personal identification certificate authority (IDA) 1001 and has been transmitted, in 
response to a request from a service provider 1002, from the personal identification certificate 
authority (IDA) 1001 to the service provider 1002 and stored in a storage means of the service 
provider 1002. The "IDC expiration date" is defined in the personal identification certificate 
(IDC). 

When user authentication is performed before starting a transaction with a user, the 
service provider 1002 reads the IDC and checks the "IDC expiration date" described in the IDC. 
If it is detected that the "IDC expiration date" has been reached, the service provider 1002 
requests the personal identification certificate authority (IDA) 1001 to issue a new IDC. In this 
case, the service provider 1002 transmits the user ID corresponding to the IDC to be updated to 
the personal identification certificate authority (IDA) 1001. In the data communication, mutual 
authentication, addition of a signature, and verification are performed. 

In accordance v^th the user ID, the personal identification certificate authority (IDA) 
1001 creates a personal identification certificate (IDC) in which a new expiration date is set 
using the user template information which has already been stored. The created personal 
identification certificate (IDC) is transmitted to the service provider 1002. The service provider 
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stores the updated IDC in the storage means of the service provider, extracts a template from the 
updated IDC, decrypts the template, and compares the template v^th sampling information. 

In a similar manner to the above-described process of updating the IDC expiration date, it 
is possible to update the number of times the IDC is allowed to be used, and it is also possible to 
update the template expiration date set by the personal identification certificate authority (IDA) 
w^hen the expiration data has been reached. 

Referring to Fig. 85, there is described a process v^hich is performed to update a personal 
identification certificate (IDC) when the checking of the expiration date of the personal 
identification certificate (IDC) reveals that the "IDC expiration date" has been reached. 

Herein, it is assumed that a personal identification certificate (IDC) of a user has been 
created by a personal identification certificate authority (IDA) 1001 and has been transmitted, in 
response to a request from a service provider 1002, from the personal identification certificate 
authority (IDA) 1001 to the service provider 1002 and stored in a storage means of the service 
provider 1002. The "IDC expiration date" is defined in the personal identification certificate 
(IDC). 

The service provider 1002 checks, at scheduled intervals, the expiration date of the 
personal identification certificate (IDC) stored in the service provider 1002. If it is detected, in 
the checking at scheduled intervals, that the IDC expiration date has been reached, the service 
provider 1002 requests the personal identification certificate authority (IDA) 1001 to issue a new 
IDC. In this case, the service provider 1002 transmits the user ID corresponding to the IDC to be 
updated to the personal identification certificate authority (IDA) 1001. In the data 
communication, mutual authentication, addition of a signature, and verification are performed. 
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In accordance with the user ID, the personal identification certificate authority (IDA) 
1001 creates a personal identification certificate (IDC) in which a new expiration date is set 
using the user template information which has already been stored. The created personal 
identification certificate (IDC) is transmitted to the service provider 1002. The service provider 
stores the updated IDC in the storage means of the service provider. 

In a similar manner to the above-described process of updating the IDC expiration date, it 
is possible to update the number of times the IDC is allowed to be used, and it is also possible to 
update the template expiration date set by the personal identification certificate authority (IDA) 
when the expiration data has been reached. 

Now, a process of updating template information is described. Updating of template 
information may be performed such that the expiration date of the template information which 
has already been registered in a personal identification certificate authority (IDA) 1001 is simply 
updated, or such that the template information which has already been registered is deleted and 
then template information is created in accordance with personal information such as fingerprint 
information which is newly given by a user. In the case where the existing registered template 
information is used and only the expiration date is simply updated, updating may be performed 
in a similar manner as in the updating of the IDC expiration date or the number of times the IDC 
is allowed to be used. In the case where the expiration date of the template information has been 
set in accordance vAth the date specified by a user, the personal identification certificate 
authority (IDA) 1001 may create a personal identification certificate (IDC) in which the template 
expiration date is reset with the approval of the user. 

However, in the case where the existing registered template information is deleted and 
template information is newly created in accordance with personal information such as 
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fingerprint information which is newly given by a user, it is required to acquire new personal 
identification information from the user. The processes are described below with reference to 
Figs. 86 and 87. 

Fig. 86 illustrates a process in which the expiration date of the template information 
which has already been registered in the personal identification certificate authority (IDA) 1001 
is checked by the personal identification certificate authority (IDA) 1001 and updated if the 
expiration date has been reached, after informing the user that the expiration date has been 
reached. 

If the user receives a message indicating that the expiration date of the template 
information has been reached, the user transmits his/her personal information such as fingerprint 
data to the personal identification certificate authority (IDA) 1001. Because this process results 
in re-execution of verification of the identification of the user, it is desirable that the process be 
performed offline. However, the process may be performed online if it is possible to verify the 
identification of the user. In this case, mutual authentication between the user terminal and the 
personal identification certificate authority (IDA) 1001, addition of a signature to data to be 
transmitted, and verification are performed. 

The personal identification certificate authority (IDA) 1001 verifies the identificafion of 
the user and creates a personal identification certificate (IDC) in which the personal 
identification data is stored as template information and a new template expiration date is set. 
The expiration date may be set in accordance v^th a request from the user. The personal 
identification certificate (IDC) in which the template expiration date has been newly set by the 
personal identification certificate authority (IDA) 1001 is transmitted to a service provider or the 
like in response to a request, for use in personal authentication. 
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Fig. 87 illustrates a process in which template information which has already been 
registered in a personal identification certificate authority (IDA) 1001 is updated in response to 
an updating request from a user. 

To make a request for updating template information, a user transmits his/her personal 
information such as fingerprint data to the personal identification certificate authority (IDA) 
1001 . Because this process results in re-execution of verification of the identification of the user, 
it is desirable that the process be performed offline. However, the process may be performed 
online if it is possible to verify the identification of the user. In this case, mutual authentication 
between the user terminal and the personal identification certificate authority (IDA) 1001, 
addition of a signature to data to be transmitted, and verification are performed. 

The personal identification certificate authority (IDA) 1001 verifies the identification of 
the user and creates a personal identification certificate (IDC) in which the personal 
identification data is stored as template information and a new template expiration date is set. 
The expiration date may be set in accordance with a request from the user. Furthermore, as 
required, for example, in response to a request from a user, the personal identification certificate 
authority (IDA) 1001 may revoke a personal identification certificate (IDC) which has already 
been issued and whose expiration date has not been reached yet. More specifically, revocation 
of an IDC is performed by issuing an IDC revocation list to a service provider or a user device to 
which the IDC has been issued. In the IDC revocation list, identification data of revoked IDCs is 
described. The service provider or the user terminal, which has received the IDC revocation list, 
checks whether the IDC revocation list includes an IDC identifier of an IDC which is going to be 
used in user authentication. If the IDC is included in the IDC revocation list, the IDC is not 
used. If necessary, the service provider or the user terminal requests the personal identification 
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certificate authority (IDA) to update the IDC and executes user authentication using the updated 
IDC. 

As described above, when a personal authentication execution entity executes personal 
authentication on the basis of a personal identification certificate in which a template serving as 
personal identification data is stored, the personal authentication execution entity verifies the 
validity of the personal identification certificate on the basis of the certificate expiration date, the 
number of times the certificate is allowed to be used, or the template expiration date. Only when 
it is determined that the personal identification certificate is valid, personal authentication is 
performed by comparing the template stored in the personal identification certificate with 
sampling information input by a user. This makes it possible for a personal identification 
certificate authority to manage the validity of personal identification certificates. The personal 
identification certificate authority may update a personal identification certificate or a template in 
response to a request from an authentication execution entity or a person certified by the personal 
identification certificate. Thus, it becomes possible to update a personal identification certificate 
or a template at an arbitrary desired time. Furthermore, setting the expiration date makes it 
possible to examine users at scheduled intervals and to easily check the validity of persons 
certified by personal identification certificates (IDCs). 

The present invention has been described in detail above with reference to particular 
embodiments. It will be apparent to those skilled in the art that various modifications and 
substitution to those embodiments may be made in the embodiment chosen for illustration 
without departing from the spirit and scope of the invention. That is, the embodiments have been 
described above by way of example and not limitation. The scope of the invention is to be 
determined solely by the appended claims. 
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